Security Operations Center (SOC) Specialist

Caci•17h ago

United StatesRemoteFull-timeMid Level10+ yrs exp

Top focus

Security EngineerOperations AnalystOperations ManagerSecurity ArchitectOperations Consultant

Job Title: Security Operations Center (SOC) Specialist Travel: Continental US * * * The Opportunity: CACI is looking for a Security Operations Center (SOC) Specialist to support our DoD customer to implement an enterprise IT service delivery model that provides consistent, secure, high-quality, and cost-effective services to enable mission success and improve end user experience across the customer environment.

On this program, CACI will deliver enhanced capabilities and services to implement and operate an enterprise ITSM solution, enterprise service desk, endpoint management and security solution, as well as CONUS/OCONUS field support and life cycle support for end user devices to enable the DoD customer to transition focus from IT operations to mission operations.

As a Security Operations Center (SOC) Specialist, you will be an integral part of the organization's cybersecurity team, responsible for monitoring, detecting, and responding to security incidents and threats. Your role will be critical in ensuring the organization's information systems and assets are protected from cyber-attacks, and that any potential security breaches are identified and mitigated promptly.

Operating within a 24/7 environment, you will collaborate with other SOC members and cybersecurity professionals to maintain a strong defensive posture and ensure the confidentiality, integrity, and availability of critical data

Responsibilities

Security Monitoring and Incident Detection: Monitor security events and incident logs from various sources, including network devices, servers, endpoints, and security tools.
Identify and analyze potential security incidents and anomalies, taking appropriate actions to investigate and escalate as required.
Incident Response and Mitigation: Participate in incident response activities, including containment, eradication, and recovery procedures.
Work closely with incident response teams and IT staff to mitigate the impact of security incidents and minimize the risk of recurrence.
Threat Intelligence Analysis: Stay updated with the latest cybersecurity threats and attack vectors.
Analyze threat intelligence reports to proactively detect and respond to emerging threats.
Security Tool Management: Operate and maintain security tools, such as SIEM (Security Information and Event Management), IDS/IPS (Intrusion Detection/Prevention Systems), antivirus, and other security-related solutions.
Investigation and Forensics: Conduct in-depth analysis of security incidents, perform digital forensics, and document findings for future reference and improvement.
Security Incident Reporting: Prepare and submit detailed incident reports, including root cause analysis and recommended remediation actions, to senior management and stakeholders.
Continuous Monitoring and Auditing: Implement continuous monitoring processes to ensure ongoing visibility into the security posture of the organization.
Perform regular audits of security controls and configurations.
Security Awareness and Training: Collaborate with the security awareness team to provide input into security training materials and awareness campaigns for employees, enhancing the overall security culture.
Security Policy Compliance: Ensure compliance with established security policies, standards, and procedures.
Assist in the development and maintenance of security policies as necessary.
Shift Handover and Documentation: Provide clear and concise shift handover reports to SOC colleagues, ensuring accurate communication of ongoing incidents and pertinent information

Qualifications

Required: Ability to maintain TS/SCI clearance 10+ years’ experience (Bachelor’s degree in relevant field may be substituted for 5 years of relevant experience).
Proven experience in a Security Operations Center (SOC) or similar role, with hands-on experience in security monitoring, incident detection, and response.
In-depth knowledge of cybersecurity principles, threat landscape, and attack vectors.
Familiarity with security tools and technologies, such as SIEM, IDS/IPS, antivirus, and endpoint detection and response (EDR) systems.
Understanding of incident response procedures and methodologies, including forensic analysis.
Strong analytical and problem-solving skills, with the ability to make quick decisions under pressure.
Excellent communication skills to collaborate effectively with other team members, management, and external stakeholders.
Required DoD 8140 compliant certification such as CompTIA Security+ Other relevant cybersecurity certifications like Certified Information Systems Security Professional (CISSP)
Certified Information Security Manager (CISM), are a plus.
Knowledge of industry compliance standards (e.g., NIST) and relevant regulations (e.g., GDPR, HIPAA) is advantageous.
Willingness to work in a 24/7 rotational shift environment, including weekends and holidays. - What You Can Expect: A culture of integrity.
At CACI, we place character and innovation at the center of everything we do.
As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation.
An environment of trust.
CACI values the unique contributions that every employee brings to our company and our customers - every day.
You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.
A focus on continuous growth.
Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground — in your career and in our legacy.
Pay Range : There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications.
Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives.
We offer competitive compensation, benefits and learning and development opportunities.
Our broad and competitive mix of benefits options is designed to support and protect employees and their families.
At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.
Since this position can be worked in more than one location, the range shown is the national average for the position.
The proposed salary range for this position is: $90,300-$189,600 CACI is an Equal Opportunity Employer.
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran
any other protected characteristic.

Required skills

SIEMIDSIPSantivirusEDRcybersecurityincident responseforensic analysis