Back to jobs
CACI10K+ employees

Cyber Monitoring Analyst

Hampton, VA$75,200 – $158,100Posted 12 days ago

Immigration summary

Visa sponsorship

PossibleLow confidence

There is real but limited sponsorship history here.

2 recent H-1B filings

View visa evidence

Green card sponsorship

Limited historyLow confidence

There is real but limited green card sponsorship history here.

1 recent certified PERM filing

View green card evidence

Job description

Job Title: Cyber Monitoring Analyst

Job Category: Information Technology

Time Type: Full time

Minimum Clearance Required to Start: TS/SCI

Employee Type: Regular

Percentage of Travel Required: Up to 10%

Type of Travel: Local

* * *

The Opportunity:

Our client is seeking a highly motivated Cyber Monitoring Analyst that will join the Cyber Security Incident Response Team supporting the AF DCGS program located onsite at Langley AFB, Va. The ideal candidate will have intermediate-level skills in Windows, Linux, and Cloud environments, supported by a background in system administration or security monitoring. They should be experienced in using SIEMs or other cyber monitoring tools for real-time threat detection and log analysis. In addition, the candidate must be capable of executing monitoring and escalation procedures in alignment with the established Incident Response Plan (IRP), with minimal oversight.
This position is embedded within a high-tempo operational environment and demands a proactive approach to monitoring, alert triage, and escalation. Candidates must be comfortable working independently during shift rotations and contributing to a shift-based 24/7 monitoring environment, including weekends and holidays.

Shift:

0500-1500 (Monday, Tuesday, Thursday, and Friday)

Responsibilities:

  • Continuously monitor security alerts and system logs to identify potential threats and anomalous activity across the OA DCGS weapon system, ensuring its confidentiality, integrity, and availability.
  • Utilize ELK/Elastic Stack to conduct real-time log analysis, detect threats, and support investigations; maintain dashboards and incident records for visibility and reporting.
  • Escalate and document security events using established ticketing systems, ensuring timely and accurate reporting to internal cyber analyst tiers (T1–T3) and appropriate external stakeholders beyond the Incident Response (IR) team.
  • Follow and maintain cybersecurity standard operating procedures (SOPs) and incident response playbooks to ensure consistent and effective monitoring practices.
  • Maintain detailed documentation of monitoring activities, incident timelines, and case notes to support post-incident reviews and compliance requirements.
  • Contribute to proactive threat detection by reviewing SIEM alerts and security dashboards to identify indicators of compromise (IOCs) and anomalous activity, supporting early escalation through behavioral analysis and correlation techniques.
  • Monitor threat intelligence feeds and security news for emerging threats, including Zero-Day vulnerabilities and CVEs, and escalate relevant findings to senior analysts for integration into detection workflows.
  • Collaborate with incident response, threat hunting, and vulnerability management teams to ensure seamless handoff and resolution of detected threats.
  • Operate independently during assigned shifts, responding to alerts with urgency and precision to minimize potential impact.
  • Support penetration testing evaluations by responding to simulated threats in real time, enabling measurement of key performance indicators (KPIs) such as Mean Time to Detect (MTTD) and Mean Time to Respond (MTTR)

Qualifications:

Required: 
• Active Top Secret/SCI security clearance.
• Bachelor’s degree in IT Technology, Computer Science, or related field with 5 years of experience in cyber operations or monitoring. Degree may be substituted with equivalent experience.
• DOD 8140 (8570) IAT Level II (Security+ or equivalent).
• Deep understanding of the Incident Response lifecycle, especially in detection and escalation phases.
• Proficiency in Elastic Stack (Elasticsearch, Logstash, Kibana) for log analysis.
• Familiarity with cyber security tools and monitoring procedures
• Excellent problem-solving and analytical skills to identify and respond to threats in real time.
• Effective written and verbal communication skills for documentation and collaboration
• Ability to work independently in a shift-based 24/7 monitoring environment, including weekends and holidays.

Desired:

  • Experience supporting AF DCGS systems or similar military ISR platforms.
  • Proficiency in using the Elastic Stack (Elasticsearch, Logstash, Kibana)
  • Experience with AWS or other cloud security platforms

-

What You Can Expect:

 A culture of integrity.

At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation.

An environment of trust.

CACI values the unique contributions that every employee brings to our company and our customers - every day. You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.

A focus on continuous growth.

Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground — in your career and in our legacy.

Pay Range

:

There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.

The proposed salary range for this position is:

$75,200-$158,100

CACI is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any other protected characteristic.

Sponsorship evidence

Why Openbound reached the conclusions above.

Visa sponsorship evidence

Current posting

Silent on sponsorship

Other openings

1 of 1822 recent openings at this employer mention sponsorship.

Employer H-1B history

2
recent certified H-1B filings
0
new-hire petitions
0
filings for similar roles
1
so far in FY2026
More evidence details
  • 2 recent certified H-1B filings across the employer
  • Still filing this year — 1 filing in FY2026
  • 1 USCIS H-1B new-employment approval, counted separately from LCA filings
  • Some filing activity in VA
  • 1 other recent posting at this company mention sponsorship
  • 1 further USCIS approval for extensions or transfers
  • We checked 5 filing titles for this employer and none describe work like this role
  • 3 other recent postings at this company state a sponsorship restriction
  • The posting says nothing about sponsorship either way

Some filing activity in VA.

Green card sponsorship evidence

Employer PERM history

1
recent certified PERM filings
0
filings for similar roles
1
filings in this location
Certified PERM filings by fiscal year
20230
20240
20251
20260YTD

Filing history reflects past employer behavior; it isn't a promise for this opening.

All open roles at CACI
How Openbound evaluates sponsorship

Visa history uses official U.S. Department of Labor H-1B LCA disclosure data and USCIS H-1B petition history. Green card history uses DOL PERM disclosure data. Each is read for the employer as a whole, for roles like this one, and for this location, weighted toward the most recent fiscal years.

An employer is matched to its filing entities by verified legal name and reviewed aliases; a match is never made on a name resemblance alone. Where no verified entity can be matched, the page says so and draws no conclusion from the absence. 5 filing titles were examined for this employer.

What this posting states outranks history in both directions, and an employer's published policy outranks past filings. Filing history reflects past behavior; it is not a promise of sponsorship for this opening, and none of this is legal advice.