Cyber Operations Analyst II

General Dynamics Information Technology, Inc.; Washington (District of Columbia); On-site; USD 117,000 - 158,000; Full time

Benefits offered by this job

Medical plans

Health Savings Accounts

Dental plan

Vision plan

401(k) plan

Paid time off

Flex work weeks

Disability insurance

Life insurance

Job summary

General Dynamics Information Technology, Inc. is seeking a Cyber Operations Analyst II to support a DHS agency’s national cyber operations center. You will receive, triage, route, and track cyber incidents, maintaining situational awareness and assisting with surge and crisis response.

The role uses AI-assisted triage tools and requires close collaboration with government personnel. The position demands 3+ years of cyber operations experience, a TS clearance with TS/SCI eligibility, and the

Qualifications

• Degree, certification, or technical training in Cybersecurity, IT, Computer Science, or a related field.
• 3+ years of experience in cyber operations, SOC, incident management, or watch floor environments.
• Experience with incident triage, escalation, and ticket/case management systems.
• Working knowledge of networking, common attack techniques, and MITRE ATT&CK.
• Strong written communication skills for reports and notifications.
• Ability to work assigned shifts and support surges when required.

Responsibilities

• Receive incident reports and route them through the center’s intake process.
• Triage and categorize events using established procedures and escalation criteria.
• Route events to appropriate teams and track them through resolution.
• Maintain accurate case records and classification markings.
• Monitor operational feeds and dashboards for situational awareness.
• Support shift turnover packages, summaries, and leadership reporting.
• Assist with surge and crisis response activities as required.
• Coordinate with government and critical infrastructure partners.
• Prepare stakeholder notifications.
• Review AI-assisted triage outputs and identify errors before escalation.

Skills

Incident Management

Situational Awareness

Systems Development

Technical Training

Education

Degree or certification in Cybersecurity/IT/CS

Job description

Type of Requisition: Regular Clearance Level Must Currently Possess: Top Secret Clearance Level Must Be Able to Obtain: Top Secret/SCI Public Trust/Other Required: None

Job Family: IT Infrastructure and Operations

Job Qualifications: Skills: Incident Management, Situational Awareness, Systems Development, Technical Training Certifications: None Experience: 3 + years of related experience US Citizenship Required: Yes

Job Description

Position Summary The Cyber Operations Analyst II supports a DHS agency’s national cyber operations center by receiving, triaging, routing, and tracking cyber incidents and operational requests. Working with watch officers, senior analysts, and government personnel, the analyst maintains situational awareness, supports shift transitions, and helps ensure consistent, documented operations. The analyst also supports adoption of modernized workflows and AI-assisted triage tools by using them in daily operations, validating outputs, and providing feedback to improve effectiveness.

Key Responsibilities

• Event Intake, Triage & Routing: Receive incident reports, information requests, and operational tasking through the center’s intake process.
• Triage and categorize events using established procedures and escalation criteria.
• Route events to appropriate teams and track them through resolution.
• Maintain accurate case records and classification markings.
• Situational Awareness & Shift Operations: Monitor operational feeds, dashboards, and collaboration tools.
• Support shift turnover packages, operational summaries, and leadership reporting.
• Assist with surge and crisis response activities as required.
• Coordination & Information Sharing: Coordinate with government, critical infrastructure, and private-sector partners.
• Prepare and track stakeholder notifications.
• Support cross-functional response efforts during significant incidents.
• Data Quality & Process Improvement: Apply data quality and governance standards to incident records and escalations.
• Follow and help maintain SOPs and playbooks.
• Review AI-assisted triage outputs and identify errors before escalation.
• Recommend workflow and process improvements.

Required Qualifications

• Degree, certification, or technical training in Cybersecurity, IT, Computer Science, or a related field.
• 3+ years of experience in cyber operations, SOC, incident management, or watch floor environments.
• Experience with incident triage, escalation, and ticket/case management systems.
• Working knowledge of networking, common attack techniques, and MITRE ATT&CK.
• Strong written communication skills for reports and notifications.
• Ability to work assigned shifts and support surges when required.
• Active Top Secret clearance with eligibility for TS/SCI access.
• Ability to work onsite at DHS Headquarters and other National Capital Region locations.
• Current DHS suitability (EOD) determination.
• Experience handling Traffic Light Protocol (TLP) and Controlled Unclassified Information (CUI).

Preferred Qualifications

• Experience supporting national-level cyber operations centers, fusion centers, or DHS/CISA, NSA, FBI, or USCYBERCOM environments.
• Familiarity with OT/ICS environments, including SCADA, PLC, and DCS technologies.
• Knowledge of NCISS or similar scoring frameworks.
• Experience with SIEM, SOAR, ServiceNow, or comparable platforms.
• Experience with Palantir Foundry or enterprise analytics tools.
• Experience using AI-assisted or automated triage capabilities.
• Security+, CySA+, GCIH, GCIA, or similar certifications.
• Knowledge of federal incident reporting requirements and timelines.
• Experience operating against service-level targets for triage and escalation.

The likely salary range for this position is $116,875 - $158,125. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.

Scheduled Weekly Hours: 40 Travel Required: 10-25% Telecommuting Options: Onsite Work Location: USA DC Washington Additional Work Locations: Total Rewards at GDIT:

• Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match.
• To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave.
• To ensure our employees are able to protect their income, other offerings such as short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available.
• We regularly review our Total Rewards package to ensure our offerings are competitive and reflect what our employees have told us they value most.

Our Identity Verification Process: As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during virtual interviews. We reserve the right to take your picture to verify your identity and prevent fraud. By proceeding, you authorize the collection, processing, and use of your biometric data for identity verification and security purposes.

About Our Work: We are GDIT. A global technology and professional services company that delivers technology solutions and mission services to every major agency across the U.S. government, defense and intelligence community. Our 26,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50+ countries worldwide, offering leading mission-ready capabilities in AI, cloud, cyber and software development.

Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans Opportunity Owned From working with technologies like AI, cyber and cloud to careers in intelligence and health, we offer endless opportunities to apply your expertise to create a safer, smarter world.