Watch Officer (Shift Lead)

General Dynamics Information Technology • Arlington, VA

1d • $153,000 - $207,000 • Hybrid

About The Position

The Watch Officer serves as the senior authority on the watch floor for an assigned shift in a 24x7x365 cyber command center supporting national cyber defense across Critical Infrastructure, SLTT, and Federal Civilian partners. This role directs monitoring, triage, escalation, and coordination activities throughout the shift and is accountable for maintaining an accurate operational picture for turnover. The Watch Officer determines escalation thresholds, approves actions within established authorities, guides analysts, and acts as the first response when operational tempo increases.

Requirements

• Experience as a watch officer or shift lead in a 24x7 SOC, fusion center, or incident command environment.
• Strong knowledge of incident triage, escalation, and lifecycle management.
• Proven ability to make time‑sensitive operational decisions under pressure.
• Experience exercising operational approval authority.
• Experience with shift turnover and operational reporting.
• Familiarity with NCISS or similar incident scoring frameworks.
• Bachelor’s degree and 10+ years of cybersecurity experience, including team leadership.
• Active Top Secret clearance.
• US Citizenship Required

Nice To Haves

• Experience supporting national‑level cyber operations centers.
• Experience establishing or maturing watch‑floor processes.
• Experience reviewing analytic or tooling output prior to leadership consumption.
• Experience coordinating with federal, SLTT, and private‑sector partners during incidents.
• Awareness of ICS/OT environments.
• Certifications such as CISSP, GCIH, GCIA, GCTI, or similar.

Responsibilities

• Lead watch-floor operations and direct analyst activity.
• Maintain the operational picture of active watch items, incidents, and escalations.
• Exercise approval authority within defined thresholds and identify when higher-level approval is required.
• Make timely escalation decisions based on established criteria.
• Ensure tools, systems, and displays support real‑time decision making.
• Review assessments and recommended actions before presentation to leadership.
• Hold or return products that do not meet standards.
• Distinguish between immediate operational needs and items requiring longer-term analysis.
• Direct initial triage and ensure response actions begin within required timelines.
• Determine escalation pathways for incidents involving Critical Infrastructure, SLTT, and Federal partners.
• Identify appropriate authorities for recommended actions and distinguish those executable on shift from those requiring external approval.
• Coordinate with federal law enforcement, National Guard, state response teams, and reachback support.
• Ensure incident records are complete, accurate, and properly scored using NCISS.
• Maintain shared situational awareness across the floor and with mission partners.
• Oversee shift contributions to daily, weekly, and monthly reporting.
• Ensure decisions are documented with rationale and aligned to required formats and timelines.
• Execute structured shift turnover with a complete and accurate picture of open incidents and outstanding actions.
• Maintain reporting cycles, required checks, and coordination points.
• Document shift activity for continuity, review, and compliance.
• Apply classification requirements and identify content requiring downgrade requests.
• Guide analysts through tasking, feedback, and on‑the‑job development.
• Ensure personnel maintain required certifications and training.
• Support onboarding and qualification of new analysts.
• Coordinate expanded coverage during elevated operational tempo.
• Support crisis action teams and ensure sustained response capability.
• Maintain readiness to extend or backfill coverage during surge periods.

Benefits

• Comprehensive benefits and wellness packages
• 401K with company match
• Competitive pay
• Paid time off
• Variety of medical plan options
• Health Savings Accounts
• Dental plan options
• Vision plan
• 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match
• Full flex work weeks where possible
• Variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave
• Short and long-term disability benefits
• Life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance

What This Job Offers

• Job Type: Full-time
• Career Level: Senior