Cyber Defense Incident Responder – NTRCEPT Lead
CACI International IncAbout the role
CACI is seeking a seasoned and dedicated Cyber Defense Incident Responder – NTRCEPT Lead to join our highly skilled team supporting the U.S. Strategic Command (USSTRATCOM) Cybersecurity Service Provider (CSSP). This critical role directly aligns with the DoD 8140 Cyber Workforce Framework work role for Cyber Defense Incident Responder (ID: 531) at the Advanced level. The successful candidate will be responsible for investigating, analyzing, and responding to complex cyber incidents within the network environment. This includes leading incident handling activities, performing forensic analysis, coordinating remediation efforts, and enhancing overall security posture. This senior technical leadership role is responsible for the overall management, operational effectiveness, and strategic direction of the CSSP team, ensuring the successful defense of critical networks. The NTRCEPT Lead will manage a multi-disciplinary team comprising cyber engineers, developers, analysts, and technicians. This position requires leadership availability and oversight, potentially including response coordination outside standard hours to support mission requirements and ensure continuous operations.
The Opportunity:
Join a CACI team where the mission is critical, and the team culture is paramount. We are building a positive, fun, collaborative, and light-hearted environment focused on collective success and individual growth. Our leadership is committed to:
Culture: Fostering an engaging workplace through gamified cyber concepts (tabletop exercises, Backdoors & Breaches card game), team contests, informative lunch-and-learn sessions, active participation in local youth cyber programs, and opportunities to attend leading industry conventions like DEFCON and BSIDES.
Training: Championing life-long learning. We prioritize robust training programs aligned with your career goals and DoD requirements. Our leadership provides mentorship and resources to ensure continuous professional development, crucial for mastering incident response techniques.
Talent Management: Investing in your future. Every team member receives a detailed and fully customized Individual Development Plan (IDP). We facilitate cross-training and exploration of different roles within CACI, ensuring you remain challenged, engaged, and never bored.
This is more than just a job; it's an opportunity to be at the forefront of defending national security assets against cyber threats while advancing your career in a supportive and dynamic environment.
Responsibilities:
As the NTRCEPT Lead, you will provide overall leadership and management for the NTRCEPT team and its functions, including but not limited to:
Leadership & Team Management: Lead, manage, mentor, and develop a diverse team of cybersecurity professionals (engineers, developers, analysts, technicians). Foster a collaborative and high-performing team environment. Oversee staffing, resource allocation, and performance management for the CSSP team.
Incident Management & Triage: Lead and coordinate incident response functions. Perform initial triage of alerts and potential incidents to determine scope, urgency, and potential impact. Track incidents from detection through resolution.
Forensic Analysis: Perform forensically sound collection of digital evidence (disk images, memory captures, logs) according to standard procedures. Analyze intrusion artifacts (malware, source code) and logs from various sources (host, network, firewall, IDS) to identify attack vectors, TTPs, and compromised systems.
Incident Handling: Execute real-time inci
Apply for this role
Generate a tailored application kit with a matched cover letter, interview prep, and CV highlights — in under 60 seconds.
Apply Now →Generate Application KitFree account required — sign up in 30s