Senior Watch Officer (SWO) / Active Top Secret

Peraton•Washington, DC

7d•$86,000 - $138,000•Onsite

About The Position

Peraton is seeking a Senior Watch Officer (SWO) to support its Federal Strategic Cyber group in Washington, D.C. The position is part of the DHS Cybersecurity and Infrastructure Security Agency’s (CISA) 24x7 SCIF/Operations Center, where the federal government coordinates situational awareness and response to protect national cyber and infrastructure security. The position is on-site and operates in a time-sensitive environment under the direction of a federal CISA Duty Officer. The SWO coordinates cyber and physical incidents affecting critical infrastructure, gathers information from sources at varying classification levels, assesses incident severity and impact, and produces accurate, timely, actionable reporting. The role leads several analysts throughout an assigned shift, coordinates tasks through completion, and serves as a liaison among internal divisions, federal stakeholders, law enforcement, intelligence agencies, regional personnel, and industry partners. The SWO also briefs management and senior leadership on developing situations. The position provides direct support to the Operations Manager in overseeing day-to-day operations of a 24x7 Cyber Operations Center, with emphasis on team development, process improvement, and mission delivery. The SWO helps maintain a requirements measurement framework, provides feedback to team members, supports optimization of resources and workflows, and contributes to white papers, briefings, and recommendations for senior U.S. government officials. Shifts are assigned according to team needs and may include rotating assignments.

Requirements

Bachelor’s degree and at least 6 years of related technical experience, or a master’s degree and at least 4 years of related experience; an additional 4 years of experience may substitute for a degree.
Demonstrated ability to manage production and publication of time-sensitive, event-driven reporting, cyclic reporting, and briefing products.
Demonstrated ability to manage and triage group email accounts while multitasking and performing steady-state shift functions.
Flexibility to work in a 24x7x365 operations support environment.
Experience with open-source analysis and alerting systems.
Active Top Secret security clearance with SCI eligibility.
Ability to obtain and maintain a favorably adjudicated DHS background investigation for continued employment.

Nice To Haves

Experience as an Operations Officer, Action Officer, or Incident Manager.
Experience drafting and publishing national-level reporting.
Experience with email triage and requests for information (RFIs).
Experience as an All-Source Intelligence Analyst in a Joint Operations Center and/or Fusion Center.
Experience with cyber incident management and analysis.
Cyber certifications, such as CompTIA Security+.

Responsibilities

Coordinate cyber and physical incidents affecting critical infrastructure and produce incident reporting.
Gather and assess information from multiple sources and classification levels to provide accurate, timely, actionable information.
Assess incident severity and impact to critical infrastructure and help federal staff determine appropriate reporting or briefing levels.
Coordinate incident operational data collection and analysis, and monitor events through competition.
Lead a team of analysts during an assigned shift and coordinate tasks through completion.
Liaise with internal divisions, federal stakeholders, law enforcement, intelligence agencies, regional personnel, and industry partners to coordinate reporting on events with cross-sector impacts.
Communicate across multiple platforms and brief management and senior leadership on developing situations during daily or ad hoc briefings.
Monitor classified databases, ticket management systems, subscription-based alerting services, cable and local news, social media, and other open sources for threats to critical infrastructure and national security.
Multitask, make timely decisions, and apply critical thinking in a fast-paced operational environment under the direction of a federal CISA Duty Officer.
Understand and troubleshoot communications and information technology hardware, software, and firmware used in daily operations, coordinating resolutions with the help desk as needed.
Support the Operations Manager in overseeing daily operations of a 24x7 Cyber Operations Center, including team development, process improvement, and mission delivery.
Assist in developing and maintaining a requirements measurement framework and provide team-member feedback on customer service, communication, and technical skills.
Support optimization of operations-center resources and workflows.
Contribute to white papers, briefings, and recommendations for senior U.S. government officials.