Cyber Operations Analyst (TS/SCI)

ZP Group; Fort Meade (MD); On-site; USD 115,000 - 130,000; Full time

Benefits offered by this job

PTO/Holidays

Cigna Medical

Dental

Vision

401k with ADP

Certification reimbursement

Contract stability through 2030

Job summary

Zachary Piper Solutions is seeking a Cyber Operations Analyst to support the DoD Cyber Defense Command Center at Fort Meade, MD. The role focuses on incident handling, network analysis, triage of events, and threat detection in a demanding 24x7 operations environment.

Qualified candidates will have a TS/SCI clearance and 4+ years in IT/cyber security, with experience in SIEM tools such as ArcSight, Splunk, and PCAP. The position offers full benefits and contract stability through 2030.

Qualifications

• Bachelor's degree in a related discipline or equivalent professional IT/cyber security experience.
• 4+ years of IT and cyber security experience.
• Experience with network monitoring/SIEM tools (ArcSight, CSAAC, Splunk, PCAP).
• Experience supporting security operations centers and briefing senior leaders.

Responsibilities

• Coordinate CND efforts across DoD components and track impact on missions.
• Provide PIRs and indications-and-warning needs to IC related to threats on DoD networks.
• Deliver unified CNDS situational awareness and attack sensing by analyzing data flows.
• Develop and refine CNDS training and CNDS certification processes.
• Monitor DoDIN IAVA compliance and assess implications for defense.

Skills

Incident handling

Network analysis

Threat detection

Event triage

SIEM monitoring

Education

Bachelor's degree in related discipline

Tools

ArcSight

CSAAC

Splunk

PCAP

Wireshark

Job description

Zachary Piper Solutions is seeking a Cyber Operations Analyst to support the DoW/ DoD Cyber Defense Command Center at Ft. Meade, MD. The customer is seeking individuals with expertise with incident handling, network analysis, triage of events, and threat detection to support a critical 24x7 operations center. Details below:

Clearance:TS/SCI required

Location: Ft. Meade, MD

Shifts:

Team 1 – 0500 – 1500/Monday – Thursday

Team 3 – 2100 – 0700/Monday – Thursday

Responsibilities of the Cyber Ops Analyst:

• Coordinate Computer Network Defense (CND) efforts across DoD Component Commands, Services, Agencies, and Field Activities (CC/S/A/FA), and track and report how DCO‑IDM operations affect their missions.
• Provide the Intelligence Community (IC) with priority intelligence requirements (PIRs) and indications-and-warning needs related to potential threats targeting DoD information systems and networks.
• Centrally manage and/or recommend CND operations that influence more than one DoD Component.
• Deliver Defense-wide situational awareness and attack sensing and warning by integrating, analyzing, and synchronizing information flows.
• De-conflict Vulnerability Analysis and Assessments (VAA) and Red Team operations with ongoing CND activities, and advise on adjustments to current or planned VAAs that could adversely impact CND missions.
• Monitor the DoDIN for Information Assurance Vulnerability Alert (IAVA) compliance and evaluate its implications on overall network defense.
• Develop a unified curriculum for CND education, training, awareness, and professional development, and ensure its application throughout the CNDS certification and accreditation processes.
• Ensure that all Computer Network Defense Service (CNDS) providers maintain continuous information sharing and operate in a coordinated manner—executing a shared Course of Action (COA) with the ability to transition to a new COA as directed. CNDS provider coordination is primarily conducted through CNDS Certification Authorities (CNDS/CAs) under USCYBERCOM direction.
• Recommend changes to Information Operations Conditions (INFOCON) in response to unauthorized activities—such as network attacks, exploitation, or misuse—to reduce risk and limit potential damage to DoD systems and networks.
• Maintain expert knowledge of DoD Computer Network Defense, including understanding network threat lifecycles, attack vectors, and methods of exploiting vulnerabilities.

Qualifications of the Cyber Ops Analyst include:

• Bachelors degree in related discipline and 4+ years of professional IT and cyber security experience
• Experience utilizing network monitoring/SIEM tools: ArcSight, CSAAC, Splunk, PCAP
• Experience working with CNDS providers or working in a CNDSP
• Technical understanding of network communication using TCP/IP protocols, system administration, malware, Computer Network Defense Operations (Proxy, Firewall, IDS/IPS), Joint Operational Planning
• Experience supporting security operations center, providing and briefing senior leaders on threats and mitigation strategies

Compensation of the Cyber Ops Analyst include:

• Total compensation based on experience level - $115,000-$130,000 **based on total years of experience**
• Full Benefits: PTO/Holidays, Cigna Medical, Dental, and Vision, 401k with ADP
• Certification reimbursement
• Contract stability funded through 2030

#LI-MK1 #LI-Onsite

Keywords: Threat detection, incident response, security event analysis, SIEM monitoring, log correlation, threat hunting, alert triage, intrusion detection, anomaly detection, Splunk, QRadar, ArcSight, Elastic Stack, Splunk, IDS, TCP, IP, TS/SCI, Top secret, polygraph, Federal, government, DoD, clearance, W2, hiring, opentowork, Maryland, PCAP, Wireshark, vulnerability, ACAS, briefing, Wireshark, SOC, security operations center, Sentinel, dashboard creation, log parsing, security automation, playbook execution, SOAR integration, network forensics, endpoint monitoring, malware analysis, vulnerability scanning, vulnerability assessment, Nessus, Tenable.sc, Qualys, Rapid7 InsightVM, risk scoring, patch validation, CVE analysis, CVSS evaluation, vulnerability prioritization, threat intelligence integration, MITRE ATT&CK mapping, IOC enrichment, packet analysis, firewall log review, IDS/IPS tuning, endpoint detection and response (EDR), compliance monitoring, IAVA tracking, DoDIN visibility, configuration baseline review, security hardening, remediation coordination, security reporting, adversary behavior analysis