Senior Watch Officer (SWO) / Active Secret
About The Position
Peraton is seeking a Senior Watch Officer (SWO) to support its Federal Strategic Cyber group in Washington, D.C. The position is part of the Department of Homeland Security Cybersecurity and Infrastructure Security Agency’s 24x7 SCIF/Operations Center, where the federal government coordinates situational awareness and response to protect national cyber and infrastructure security. The role is on-site and requires an experienced operations, intelligence, or cyber practitioner who can work in a time-sensitive operational environment. The SWO coordinates response to cyber and physical incidents affecting critical infrastructure, gathers and assesses information from sources at varying classification levels, and produces accurate, timely, actionable incident reporting for government leadership and partners. The officer leads a team of analysts during a shift, coordinates incident data collection and analysis, monitors events through completion, and works with federal staff to assess impact and determine reporting or briefing needs. The SWO also serves as a liaison among internal divisions, federal stakeholders, law enforcement, intelligence agencies, regional personnel, and industry partners, and briefs management and senior leaders on developing situations. The role includes monitoring classified databases, ticket management systems, subscription-based alerts, news, social media, and other open sources for threats to critical infrastructure and national security. The SWO makes time-sensitive decisions under the direction of a federal CISA Duty Officer, supports the Operations Manager in day-to-day operations of the 24x7 Cyber Operations Center, and contributes to team development, process improvement, resource and workflow optimization, and mission delivery. Shifts are assigned according to team needs and may rotate. Listed schedules include weekday day, evening, and overnight shifts, as well as weekend shifts paired with two weekday shifts.
Requirements
- Bachelor’s degree with at least 6 years of related technical experience, or master’s degree with at least 4 years of related experience; an additional 4 years of experience may substitute for a degree.
- Demonstrated ability to manage production and publication of time-sensitive, event-driven reporting, cyclic reporting, and briefing products.
- Demonstrated ability to manage and triage group email accounts while multitasking and performing steady-state shift functions.
- Flexibility to work in a 24x7x365 operations support environment.
- Experience with open-source analysis and alerting systems.
- Active Secret clearance and ability to obtain a Top Secret clearance with SCI eligibility.
- Ability to obtain and maintain a favorably adjudicated DHS background investigation for continued employment.
Nice To Haves
- Experience as an Operations Officer, Action Officer, or Incident Manager.
- Experience drafting and publishing national-level reporting.
- Experience with email triage and requests for information (RFIs).
- Experience as an All-Source Intelligence Analyst in a Joint Operations Center and/or Fusion Center.
- Experience with cyber incident management and analysis.
- Cyber certifications, such as CompTIA Security+.
Responsibilities
- Coordinate cyber and physical incidents affecting critical infrastructure and produce incident reporting at varying levels.
- Gather information from multiple sources and classification levels to provide accurate, timely, actionable information to government leadership, law enforcement, federal stakeholders, and partners.
- Assess incidents and their severity and collaborate with federal staff to determine appropriate reporting and briefing requirements.
- Coordinate incident operational data collection and analysis, and monitor events through completion.
- Lead a team of analysts throughout assigned shifts and coordinate tasks through completion.
- Liaise with internal divisions, federal stakeholders, law enforcement, intelligence agencies, regional personnel, industry partners, and internal partners to coordinate reporting for events with cross-sector impacts.
- Communicate on multiple platforms and brief management and senior leadership on developing situations during daily or ad hoc briefings.
- Monitor classified databases, ticket management systems, subscription-based alerting services, cable and local news, social media, and other open sources for threats to critical infrastructure and national security.
- Multitask, make timely decisions, and apply critical thinking in a fast-paced operations environment under the direction of a federal CISA Duty Officer.
- Understand, troubleshoot, and coordinate resolution of issues with communications and information technology hardware, software, and firmware used in daily operations.
- Provide direct support to the Operations Manager in overseeing day-to-day operations of a 24x7 Cyber Operations Center, with a focus on team development, process improvement, and mission delivery.
- Assist the Operations Manager in developing and maintaining a requirements measurement framework and providing team members feedback on customer service, communication, and technical skills.
- Support optimization of operations center resources and workflows and contribute to white papers, briefings, and recommendations for senior U.S. government officials.
Benefits
- Medical benefits
- Dental insurance
- Vision insurance
- Life insurance
- Health savings account
- Short- and long-term disability
- Employee assistance program (EAP)
- Parental leave
- 401(k)
- Paid time off for vacation
- Company-paid holidays
- Potential overtime, shift differential, and discretionary bonus eligibility depending on the position
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
