Watch Analyst / Active Top Secret

Peraton•Washington, DC

5d•Onsite

About The Position

Peraton is seeking a Watch Analyst to support its Federal Strategic Cyber team in Washington, DC. The position supports the Department of Homeland Security (DHS), Cybersecurity and Infrastructure Security Agency (CISA), in a classified 24/7 Operations and Watch Center. The center monitors, assesses, and coordinates responses to emerging cyber, physical, and infrastructure threats that affect national security, providing situational awareness and actionable intelligence to federal leadership, law enforcement, and government stakeholders. The Watch Analyst monitors classified databases, incident management systems, alerting services, news, social media, and other open-source intelligence; assesses incidents for severity and potential impact; and prepares timely reports and briefings. The role coordinates incident tracking and documentation with team members and government partners, supports operations under the direction of a federal CISA Duty Officer, and uses sound judgment in a fast-paced, time-sensitive environment. It also requires adherence to classified information-handling and operational security procedures, familiarity with operational communications and information technology systems, and effective coordination to resolve technical issues and maintain continuity across shifts. This is a 100% on-site position in Washington, DC. The center operates 24 hours a day, 7 days a week, 365 days a year, including weekends and holidays. Shift assignments depend on operational requirements and may include rotating schedules. Current schedules include weekday day, evening, and overnight shifts, as well as weekend shifts combined with weekday shifts.

Requirements

Bachelor’s degree and 2 years of relevant experience, or an additional 4 years of experience in lieu of a bachelor’s degree.
Excellent written and verbal communication skills.
Broad capabilities and expertise in research, analysis, and report writing.
Flexibility to work in a 24/7/365 operations support environment.
Experience with open-source analysis and alerting systems.
Knowledge of Microsoft Office automation solutions.
Experience or expertise in one or more critical infrastructure sectors, cyber, and/or emergency management.
Knowledge of National Incident Management System (NIMS) structure, emergency management operations, and background knowledge of at least one critical infrastructure sector.
Completion of FEMA IS-100.c, IS-453, IS-520, IS-545.a, IS-551, IS-700.b, IS-800.d, IS-860.c, and IS-1300 before the first day on the contract.
U.S. citizenship.
Active Top Secret security clearance, with ability to obtain SCI.
Ability to obtain and maintain a favorably adjudicated DHS background investigation for continued employment.
Ability to work on-site in Washington, DC, including shifts that may involve weekends, holidays, or rotating schedules.

Nice To Haves

Specialized operations center experience.
Experience drafting and publishing national-level reporting.
Experience with email triage and requests for information (RFIs).
Experience as an All-Source Intelligence Analyst in a Joint Operations Center and/or Fusion Center.
Experience with cyber incident management and analysis.
Cyber certifications, such as CompTIA Security+.
Experience with Knowledge Management Systems and ServiceNow.
Ability to read technical cyber reporting, including IOCs and TTPs, and extract important information to provide clear, concise reporting for a non-technical audience.

Responsibilities

Monitor classified databases, incident management systems, alerting services, news outlets, social media, and other open-source intelligence for emerging threats and incidents affecting critical infrastructure and national security.
Conduct initial assessments of cyber, physical, and communications incidents to determine severity, potential impact, and appropriate reporting or escalation requirements.
Analyze and synthesize information into accurate, timely, actionable reports and briefings for government leadership, law enforcement, and federal stakeholders.
Collaborate with team members and government partners to track, coordinate, and document incidents through resolution.
Support operations under the direction of a federal CISA Duty Officer, using sound judgment, critical thinking, and effective decision-making in a fast-paced, time-sensitive environment.
Follow classified information-handling procedures, operational security protocols, and confidentiality requirements.
Operate and maintain familiarity with communications and information technology systems used in daily operations.
Identify and troubleshoot technical issues and coordinate resolution with appropriate support teams.
Support continuous watch operations, maintain operational awareness, and ensure effective communication and continuity across shifts.
Perform other operational support activities as directed by the government customer.

Benefits

Medical benefits
Dental insurance
Vision insurance
Life insurance
Health savings account
Short- and long-term disability
Employee Assistance Program (EAP)
Parental leave
401(k)
Paid time off for vacation
Company-paid holidays
Potential overtime, shift differential, and discretionary bonus, depending on the position