Cyber Operations Analyst II
About The Position
The Cyber Operations Analyst II supports a DHS agency’s national cyber operations center by receiving, triaging, routing, and tracking cyber incidents and operational requests. Working with watch officers, senior analysts, and government personnel, the analyst maintains situational awareness, supports shift transitions, and helps ensure consistent, documented operations. The analyst also supports adoption of modernized workflows and AI-assisted triage tools by using them in daily operations, validating outputs, and providing feedback to improve effectiveness. The role is onsite at DHS Headquarters and other National Capital Region locations. It requires an active Top Secret clearance with eligibility for TS/SCI access, and the ability to work assigned shifts and support surges when required. Travel required is 10–25%.
Requirements
- Degree, certification, or technical training in Cybersecurity, IT, Computer Science, or a related field.
- 3+ years of experience in cyber operations, SOC, incident management, or watch floor environments.
- Experience with incident triage, escalation, and ticket/case management systems.
- Working knowledge of networking, common attack techniques, and MITRE ATT&CK.
- Strong written communication skills for reports and notifications.
- Ability to work assigned shifts and support surges when required.
- Active Top Secret clearance with eligibility for TS/SCI access.
- Ability to work onsite at DHS Headquarters and other National Capital Region locations.
- U.S. citizenship required.
Nice To Haves
- Experience supporting national-level cyber operations centers, fusion centers, or DHS/CISA, NSA, FBI, or USCYBERCOM environments.
- Familiarity with OT/ICS environments, including SCADA, PLC, and DCS technologies.
- Knowledge of NCISS or similar scoring frameworks.
- Experience with SIEM, SOAR, ServiceNow, or comparable platforms.
- Experience with Palantir Foundry or enterprise analytics tools.
- Experience using AI-assisted or automated triage capabilities.
- Security+, CySA+, GCIH, GCIA, or similar certifications.
- Knowledge of federal incident reporting requirements and timelines.
- Experience operating against service-level targets for triage and escalation.
- Current DHS suitability (EOD) determination.
- Experience handling Traffic Light Protocol (TLP) and Controlled Unclassified Information (CUI).
Responsibilities
- Receive incident reports, information requests, and operational tasking through the center’s intake process.
- Triage and categorize events using established procedures and escalation criteria.
- Route events to appropriate teams and track them through resolution.
- Maintain accurate case records and classification markings.
- Monitor operational feeds, dashboards, and collaboration tools.
- Support shift turnover packages, operational summaries, and leadership reporting.
- Assist with surge and crisis response activities as required.
- Coordinate with government, critical infrastructure, and private-sector partners.
- Prepare and track stakeholder notifications.
- Support cross-functional response efforts during significant incidents.
- Apply data quality and governance standards to incident records and escalations.
- Follow and help maintain SOPs and playbooks.
- Review AI-assisted triage outputs and identify errors before escalation.
- Recommend workflow and process improvements.
Benefits
- Medical plan options, some with Health Savings Accounts
- Dental plan options
- Vision plan
- 401(k) plan with company match
- Full flex work weeks where possible
- Paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave
- Short- and long-term disability benefits
- Life, accidental death and dismemberment, personal accident, critical illness, and business travel and accident insurance
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
Education Level
No Education Listed
