Data Analyst - Cybersecurity

About the Company

CACI supports critical government missions through technology, expertise, and innovative solutions. Its work includes helping protect federal IT networks and strengthening the security, resilience, and reliability of the nation's cyber and communications infrastructure.

About the Role

CACI is seeking a Cybersecurity Assessment Data Analyst to support federal cybersecurity assessment and continuous monitoring efforts. This full-time, regular position focuses on turning assessment results, vulnerability scans, asset inventories, technical evidence, and remediation data into reliable operational insights.

You will support penetration testing, red team activities, and attack-surface evaluations by improving data quality, identifying trends and risk concentrations, and developing repeatable dashboards and reports. The role contributes to the Continuous Diagnostics and Mitigation (CDM) Program by helping identify exposures across government domains and internet-facing assets and providing agencies with actionable remediation information. Your analysis will support technical assessment specialists without replacing their professional judgment.

Key Responsibilities

• Ingest, normalize, reconcile, and validate data from approved assessment tools, scanners, APIs, repositories, tickets, technical evidence, and remediation workflows.
• Develop reusable data models, queries, scripts, metrics, dashboards, and reports covering asset coverage, findings, attack paths, severity, remediation status, and delivery performance.
• Correlate vulnerability and exposure data with CISA Known Exploited Vulnerabilities (KEV), Common Vulnerability Scoring System (CVSS), Exploit Prediction Scoring System (EPSS), asset criticality, exploit evidence, threat context, and customer priorities.
• Investigate duplicate records, conflicting identifiers, missing fields, outdated information, outliers, and data reconciliation issues.
• Document data sources, lineage, metric definitions, and validation procedures.
• Create clear visualizations and executive summaries while maintaining access to supporting technical evidence and explaining analytical limitations.
• Collaborate with assessment subject matter experts, technical writers, project managers, and customer stakeholders to respond accurately and promptly to recurring and ad hoc analytical requests.
• Automate recurring data extracts, transformations, validation checks, and reporting deliverables using version-controlled code and documented procedures.

Required Qualifications

• U.S. citizenship is required.
• Must meet eligibility requirements for access to sensitive information and be able to obtain a Public Trust fitness determination at the High Risk level.
• Ability to work in customer-provided remote environments, use customer-approved tools, and follow rules of engagement, data-handling requirements, evidence controls, deconfliction procedures, and stop-work criteria.
• Five or more years of experience in data analysis, cybersecurity analytics, reporting, business intelligence, or data engineering, including work with technical security data.
• Strong SQL and Python skills, with practical experience in data cleaning, joins, APIs, structured files, data-quality validation, reproducible analysis, and version control.
• Experience developing dashboards and reports using Power BI, Tableau, Splunk, Elastic, or comparable tools.
• Working knowledge of vulnerability, asset, finding, evidence, ticket, and remediation data, along with concepts such as CVE, CVSS, CISA KEV, EPSS, false positives, and attack paths.
• Ability to define metrics precisely, reconcile conflicting data sources, explain limitations, and communicate findings to technical and executive audiences.

Preferred Qualifications

• Experience working with exposure management, attack-surface evaluation, penetration testing, red team, SIEM, data-lake, or security-orchestration data.
• Experience with graph analytics, entity resolution, attack-path modeling, geospatial analysis, or large-scale internet asset data.
• Familiarity with AWS or Azure data services, Databricks, Snowflake, Elasticsearch, Splunk, or API integrations.
• Experience developing executive cyber-risk reports, operational KPIs, SLA tracking, or remediation scorecards.
• Relevant certifications in data, cloud, cybersecurity, Power BI, Tableau, Splunk, Elastic, or GIAC.

Travel & Clearance Requirements

This is a full-time position requiring a minimum clearance eligibility level of Public Trust. The selected candidate must be able to obtain a High Risk Public Trust fitness determination. Travel may be required up to 10% within the continental United States.

Salary & Benefits

The proposed national average salary range is $90,300–$189,600. Final compensation may depend on factors such as geographic location, applicable federal contract labor categories and wage rates, relevant experience, skills, education, and certifications.

CACI offers a range of benefits designed to support employees and their families, including healthcare, wellness programs, financial and retirement benefits, family support, continuing education, learning and development opportunities, and time-off benefits. Employees also have access to a flexible time-off benefit.

Equal Opportunity Employer

CACI is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, protected veteran status, or any other protected characteristic.