Incident Responder at CACI in Suitland, MD

Incident Responder Location: Suitland, MD, US Job Title: Incident Responder Job Category: Information Technology Time Type: Full time Minimum Clearance Required to Start: TS/SCI Employee Type: Regular Percentage of Travel Required: Up to 10% Type of Travel: Local * * * The Opportunity: CACI is seeking a skilled and experienced Incident Responder (Level 2) to join our dynamic team to support a DoD client in Suitland, MD. The ideal candidate will have extensive experience in Computer Network Defense (CND), incident triage, incident reporting, and incident response and investigation. This role requires a proactive individual with strong analytical skills, excellent communication abilities, and a deep understanding of IT systems and networks. The Incident Responder will be responsible for managing the full incident lifecycle, from detection and analysis to containment, remediation, and recovery. Responsibilities: Incident Management: Manage the full incident lifecycle, including detection, analysis, containment, remediation, and recovery. Triage, report, and respond to security incidents in a timely manner. Conduct incident and intrusion trend analysis to identify patterns and potential threats. Documentation and Reporting: Document incidents clearly and concisely, ensuring all relevant information is captured for future analysis and legal or compliance purposes. Prepare and present detailed incident reports and briefings to stakeholders. Security Classification and Spillage Cleanup: Interpret Security Classification Guides and apply classification markings/interpretations. Coordinate spillage cleanup activities to ensure data integrity and security. Threat Intelligence and Best Practices: Utilize threat intelligence to enhance incident response efforts. Develop and implement "best practices," manuals, and standard operating procedures based on Federal, DoD, IC, and industry standards. Collaboration and Stakeholder Management: Collaborate with technical teams to implement remediation measures to prevent recurrence of incidents. Coordinate with stakeholders to provide updates and recommendations for improving security practices based on post-incident analysis. Tool Utilization: Utilize incident tracking tools such as ticketing systems and case management platforms. Employ cybersecurity tools to investigate instances of alleged employee or external actor wrongdoing. Qualifications: Required: TS/SCI Security Clearance BA/BS in Computer Science, Information Technology, Information Assurance, or a related area of study desired. Without a degree, 8+ years of relevant professional experience in those fields is required. Must have 5+ years of concentrated experience in CND discipline. 3+ years of professional experience in incident triage, incident reporting, incident response and investigation, incident and intrusion trend analysis, interpreting Security Classification Guides and applying classification markings/interpretations, and spillage cleanup coordination. Sec + CE Certification Effective interpersonal, organizational, time management, writing/documentation, and briefing skills with strong attention to detail. Strong analytical, conceptual, and problem-solving skills. Proven ability in communicating effectively and developing/presenting presentations. Ability to think outside the box by utilizing IT knowledge and cybersecurity tool output to investigate incidents. Proven ability in prioritizing, executing, and completing tasks with little to no direction in a high-pressure environment. Moderate experience utilizing Federal, DoD, IC, and industry standards in the creation of "best practices," manuals, and standard operating procedures. Moderate experience in the development and implementation of Incident Reporting, Response, and Remediation tactics, techniques, and procedures (TTPs). Moderate knowledge of policies and processes related to Computer Network Defense (CND) execution. Moderate knowledge of incident management lifecycle processes required for the identification, categorization, eradication, response, recovery, and mitigation of cybersecurity incidents and breaches. Moderate knowledge of common enterprise services such as domain controller - What You Can Expect: A culture of integrity. At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation. An environment of trust. CACI values the unique contributions that every employee brings to our company and our customers - every day. You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality. A focus on continuous growth. Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground — in your career and in our legacy. Pay Range: There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits. The proposed salary range for this position is: $86,600 - $181,800 CACI is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any other protected characteristic.