Watch Analyst

Peraton•Linthicum, MD

About The Position

Position Description: The Watch Analyst will monitor classified databases, the ticket management system, subscription-based alerting services, cable and local news, social media, and other open sources for threats to the nation’s critical infrastructure and global operations impacting national security. The Watch Analyst should provide the initial triage and analysis of cyber, physical, and communication incidents to identify the severity of impact to critical infrastructure and determine the level of reporting or briefing required. The candidate will work with a small team to provide accurate, timely, and actionable reports to our government leadership, law enforcement, federal stakeholders, and partners. The team will coordinate incidents affecting critical infrastructure through incident completion. The candidate should be an experienced Operations/Intelligence/Cyber practitioner with the ability to work in a time-sensitive operational environment. Watch Analysts must maintain strict adherence to security protocols and confidentiality requirements in handling sensitive information. Watch Analysts must be able to multitask, make quick decisions, and utilize critical thinking skills in a time sensitive environment under the direction of a federal CISA Duty Officer. The candidate must be detail-oriented and have strong analytical skills with the ability to evaluate data, synthesize information, and write reports. The candidate is expected to understand the operation of all communications and information technology hardware and software utilized to perform daily functions. The candidate should have the ability to troubleshoot all equipment issues as needed and coordinate a resolution with the help desk. Other services and support as needed or directed by the government client. Shifts are assigned based on the needs of the team and may include rotating assignments. Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can’t be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we’re keeping people around the world safe and secure.

Requirements

4 years relevant experience with AS/AA; 2 years relevant experience with BS/BA; 8 years with no degree.
At least one (1) year of specialized operations center experience.
Active DoD Top Secret clearance with SCI eligibility.
Active CompTIA Security+ certification.
Strong desire to learn and work in a live Network Operations and Security environment.
Experience with Knowledge Management Systems e.g. JIRA & Confluence.
Willingness to work shifts to provide 24/7/365 operations support.
Experience in Network Administration, Systems Administration and/or Network Security.
Demonstrated excellent written and verbal communication skills.
Must have broad expertise in research, analysis, and report writing skills.
Must be flexible and able to work within 12 hours @ 5 days a week operations support environment.
Experience with open-source analysis and alerting systems.
Knowledge of Microsoft Office automation solutions.
Must have experience/expertise in one or more critical infrastructure sectors (as defined by HSPD-7 and the NIPP), cyber and/or emergency management.
Must have Knowledge of National Incident Management System (NIMS) structure, emergency management operations, and background knowledge of one (1) or more critical infrastructure sectors.
U.S. citizenship is required.
In addition, selected candidates must be able to obtain and maintain a favorably adjudicated DOW background investigation for continued employment.

Nice To Haves

Experience in drafting and publishing national level reporting.
Experience with email triage and requests for information (RFIs).
Experience as an All-Source Intelligence Analyst in Joint Operations Center and/or Fusion Center.
Experience with cyber incident management and analysis
Has the ability to read technical cyber reporting, including IOCs and TTPs, and be able to extract important information to provide clear and concise reporting for a non-technical audience.

Responsibilities

Monitor classified databases, the ticket management system, subscription-based alerting services, cable and local news, social media, and other open sources for threats to the nation’s critical infrastructure and global operations impacting national security.
Provide the initial triage and analysis of cyber, physical, and communication incidents to identify the severity of impact to critical infrastructure and determine the level of reporting or briefing required.
Work with a small team to provide accurate, timely, and actionable reports to our government leadership, law enforcement, federal stakeholders, and partners.
Coordinate incidents affecting critical infrastructure through incident completion.
Maintain strict adherence to security protocols and confidentiality requirements in handling sensitive information.
Multitask, make quick decisions, and utilize critical thinking skills in a time sensitive environment under the direction of a federal CISA Duty Officer.
Evaluate data, synthesize information, and write reports.
Understand the operation of all communications and information technology hardware and software utilized to perform daily functions.
Troubleshoot all equipment issues as needed and coordinate a resolution with the help desk.
Other services and support as needed or directed by the government client.