Cyber Operations Analyst (TS/SCI)

Zachary Piper Solutions; Northern (KY); Hybrid; USD 115,000 - 130,000; Full time

Benefits offered by this job

Full benefits

401k with ADP

Certification reimbursement

Contract stability through 2030

Job summary

Zachary Piper Solutions is seeking a Cyber Operations Analyst to support the DoD Cyber Defense Command Center at Ft. Meade, MD.

The role requires TS/SCI clearance and provides 24x7 incident handling, network analysis, and threat detection capabilities within a critical Defense operational environment. Responsibilities include coordinating CND efforts across DoD components, delivering defense-wide situational awareness, and ensuring CNDS operations meet reporting and security requirements.

Qualifications

• 4+ years of professional IT and cyber security experience.
• Experience with network monitoring/SIEM tools (ArcSight, CSAAC, Splunk, PCAP).
• Experience with CNDS providers or working in a CNDSP.
• Technical understanding of TCP/IP, system administration, malware, and CND operations.

Responsibilities

• Coordinate CND efforts across DoD components and track/report DCO‑IDM operations.
• Provide IC with PIRs and indications-and-warning needs related to threats.
• Centrally manage/recommend CND operations spanning multiple DoD components.
• Deliver DoD-wide situational awareness and attack sensing by analyzing/integrating data.
• De-conflict VAA and Red Team ops with ongoing CND activities and adjust VAAs as needed.
• Monitor DoDIN for IAVA compliance and assess implications for network defense.
• Develop CNDS education/training curriculum and apply in CNDS certification processes.
• Ensure CNDS providers maintain coordinated information sharing and execute a shared COA.
• Suggest INFOCON changes in response to unauthorized activity to limit damage.
• Maintain expert knowledge of DoD CND, threat lifecycles, vectors, and vulnerabilities.

Skills

Incident handling

Network analysis

Threat detection

SIEM monitoring

Threat intel

Education

Bachelor's degree

Tools

ArcSight

Splunk

CSAAC

PCAP

Job description

Zachary Piper Solutions is seeking a Cyber Operations Analyst to support the DoW/ DoD Cyber Defense Command Center at Ft. Meade, MD. The customer is seeking individuals with expertise with incident handling, network analysis, triage of events, and threat detection to support a critical 24x7 operations center. Details below:

Clearance:TS/SCI required

Location: Ft. Meade, MD

Shifts:

Team 1 – 0500 – 1500/Monday – Thursday

Team 3 – 2100 – 0700/Monday – Thursday

This job opens for applications on 9/29/2026. Applications for this job will be accepted for at least 30 days from the posting date

Responsibilities of the Cyber Ops Analyst:

• Coordinate Computer Network Defense (CND) efforts across DoD Component Commands, Services, Agencies, and Field Activities (CC/S/A/FA), and track and report how DCO‑IDM operations affect their missions.
• Provide the Intelligence Community (IC) with priority intelligence requirements (PIRs) and indications-and-warning needs related to potential threats targeting DoD information systems and networks.
• Centrally manage and/or recommend CND operations that influence more than one DoD Component.
• Deliver Defense-wide situational awareness and attack sensing and warning by integrating, analyzing, and synchronizing information flows.
• De-conflict Vulnerability Analysis and Assessments (VAA) and Red Team operations with ongoing CND activities, and advise on adjustments to current or planned VAAs that could adversely impact CND missions.
• Monitor the DoDIN for Information Assurance Vulnerability Alert (IAVA) compliance and evaluate its implications on overall network defense.
• Develop a unified curriculum for CND education, training, awareness, and professional development, and ensure its application throughout the CNDS certification and accreditation processes.
• Ensure that all Computer Network Defense Service (CNDS) providers maintain continuous information sharing and operate in a coordinated manner—executing a shared Course of Action (COA) with the ability to transition to a new COA as directed. CNDS provider coordination is primarily conducted through CNDS Certification Authorities (CNDS/CAs) under USCYBERCOM direction.
• Recommend changes to Information Operations Conditions (INFOCON) in response to unauthorized activities—such as network attacks, exploitation, or misuse—to reduce risk and limit potential damage to DoD systems and networks.
• Maintain expert knowledge of DoD Computer Network Defense, including understanding network threat lifecycles, attack vectors, and methods of exploiting vulnerabilities.

Qualifications of the Cyber Ops Analyst include:

• Bachelors degree in related discipline and 4+ years of professional IT and cyber security experience
• Experience utilizing network monitoring/SIEM tools: ArcSight, CSAAC, Splunk, PCAP
• Experience working with CNDS providers or working in a CNDSP
• Technical understanding of network communication using TCP/IP protocols, system administration, malware, Computer Network Defense Operations (Proxy, Firewall, IDS/IPS), Joint Operational Planning
• Experience supporting security operations center, providing and briefing senior leaders on threats and mitigation strategies

Compensation of the Cyber Ops Analyst include:

• Total compensation based on experience level - $115,000-$130,000 **based on total years of experience**
• Full Benefits: PTO/Holidays, Cigna Medical, Dental, and Vision, 401k with ADP
• Certification reimbursement
• Contract stability funded through 2030

#LI-MK1 #LI-Onsite

Keywords: Threat detection, incident response, security event analysis, SIEM monitoring, log correlation, threat hunting, alert triage, intrusion detection, anomaly detection, Splunk, QRadar, ArcSight, Elastic Stack, Splunk, IDS, TCP, IP, TS/SCI, Top secret, polygraph, Federal, government, DoD, clearance, W2, hiring, opentowork, Maryland, PCAP, Wireshark, vulnerability, ACAS, briefing, Wireshark, SOC, security operations center, Sentinel, dashboard creation, log parsing, security automation, playbook execution, SOAR integration, network forensics, endpoint monitoring, malware analysis, vulnerability scanning, vulnerability assessment, Nessus, Tenable.sc, Qualys, Rapid7 InsightVM, risk scoring, patch validation, CVE analysis, CVSS evaluation, vulnerability prioritization, threat intelligence integration, MITRE ATT&CK mapping, IOC enrichment, packet analysis, firewall log review, IDS/IPS tuning, endpoint detection and response (EDR), compliance monitoring, IAVA tracking, DoDIN visibility, configuration baseline review, security hardening, remediation coordination, security reporting, adversary behavior analysis