Cybersecurity Assessment Data Analyst

About the role

CACI is hiring a Cybersecurity Assessment Data Analyst to turn assessment, scan, asset, evidence and remediation data into trusted operational insights. The analyst supports penetration testing, red team and attack-surface evaluation by normalizing data, validating quality, spotting trends and risk concentrations, and producing repeatable dashboards and reports. The role provides continuous technical assessment support for full-time, proactive testing of externally and internally visible federal cyber assets, supporting the Continuous Diagnostics and Mitigation (CDM) Program's mission to safeguard the Nation's cyber and communications infrastructure.

Key responsibilities

• Ingest, normalize, reconcile and quality-check data from approved assessment tools, scanners, APIs, repositories, tickets, operator evidence and remediation workflows.
• Build data models, queries, scripts, metrics, dashboards and reporting packages covering asset coverage, finding trends, attack paths, severity, remediation status and delivery performance.
• Correlate vulnerability and exposure data with CISA KEV, CVSS, EPSS, asset criticality, exploit evidence and threat context.
• Investigate duplicates, conflicting identifiers, missing fields, stale records and outliers, documenting source lineage and metric definitions.
• Create visualizations and executive summaries with drill-down access to technical evidence.
• Partner with assessment SMEs, technical writers, project management and customers to answer questions accurately and quickly.
• Automate recurring extracts, transformations, validation checks and deliverables using source-controlled code.

Required profile

• U.S. citizenship and eligibility for a Public Trust (High Risk) fitness determination.
• Five or more years of data analysis, cybersecurity analytics, reporting, business intelligence or data-engineering experience with technical security data.
• Ability to work remotely in customer-provided environments, follow rules of engagement and evidence controls.

Required skills

• Strong SQL and Python, data cleaning, joins, APIs, structured files, quality validation, reproducible analysis and version control.
• Dashboards and reports in Power BI, Tableau, Splunk, Elastic or comparable tools.
• Working knowledge of CVE, CVSS, CISA KEV, EPSS, false positives and attack paths.
• Desired: exposure-management, attack-surface, penetration-testing, red-team, SIEM, data-lake or security-orchestration data; AWS/Azure, Databricks, Snowflake, Elasticsearch; executive cyber-risk narratives; relevant certifications.

What we offer

• Proposed pay range of $90,300-$189,600, depending on location, contract category, experience and skills.
• Healthcare, wellness, financial, retirement, family support, continuing education and time-off benefits.
• Flexible time off and learning resources.