Cybersecurity Operations Analyst

Jcssolutions; Alexandria (VA); On-site; USD 105,000 - 150,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Life insurance

Disability insurance

PTO

401k with employer match

Professional development reimbursement

Job summary

JCS Solutions is seeking a Cybersecurity Operations Analyst to join a fast-paced SOC. You will monitor security alerts, triage incidents, and support threat investigations for critical IT infrastructure.

A TS/SCI clearance is required, with extensive SOC experience and DoD-aligned certifications. The role offers a daytime schedule on Tue–Sat and a strong benefits package including health, life, disability, PTO, and a 401k plan.

Qualifications

• Active TS/SCI clearance required
• 10+ years in cybersecurity operations or related field
• Experience in SOC environments with security monitoring, detection, triage, investigation and response
• Understanding of CND with Protect, Detect, Respond, Sustain
• Knowledge of threat lifecycle, IOCs, TTPs and attacker techniques
• Strong TCP/IP networking knowledge and OSI model concepts
• Excellent analytical, writing, and verbal communication skills
• DoD 8570 IAT Level II or higher certification (e.g., Security+ CE, SSCP, GSEC)
• Ability to obtain CSSP Analyst certification within six months
• Willingness to support weekend/alternate schedules

Responsibilities

• Monitor and analyze security alerts from endpoints, IDS/IPS, NetFlow, SIEMs and sensors for threats
• Conduct Tier 1/2 security analysis by reviewing large log data and correlating evidence
• Investigate and triage security events, escalating to senior SOC analysts
• Identify malicious activity, IOCs, and adversary behaviors in customer environments
• Document investigations, findings, and recommendations in case management systems
• Assist in incident reports, executive summaries, and technical findings for customers
• Maintain awareness of emerging threats to improve SOC detection capabilities
• Collaborate with cybersecurity teammates on incident response and threat-hunting initiatives

Skills

Security clearance

SOC experience

Analytical skills

Communication skills

Team collaboration

Threat intelligence

Incident response

Education

Bachelor's degree in Cybersecurity, Information Technology, or Computer Science

Tools

Splunk

ArcSight

QRadar

McAfee ESM

IDS/IPS

HBSS/HIPS

Antivirus

Packet capture

Network forensics

Python

PowerShell

Bash

Job description

Grow, innovate, and generate progress: Harness your expertise to solve challenges and celebrate success!

Job Summary

JCS Solutions is seeking a Cybersecurity Operations Analyst to support a fast-paced Security Operations Center (SOC) environment. This role is responsible for helping protect critical IT infrastructure through continuous cybersecurity monitoring, threat detection, incident analysis, and security operations support. The successful candidate must possess an active DoD security clearance and will play a key role in maintaining and strengthening the security posture of a leading IT and cybersecurity services organization. Working alongside cybersecurity professionals, you will contribute to the identification, investigation, and response to security events while supporting ongoing efforts to improve cyber defense capabilities and operational resilience.

Day shift:

Tuesday through Saturday 6am - 2pm

Active: TS/SCI is required.

Salary Range:

$105,000 to $150,000

Location:

Alexandria, VA

What’s in it for you:

• Join a premier technology firm specializing in innovative solutions.
• Be part of a collaborative, inclusive, and innovative work culture.
• Enjoy tremendous growth potential in a high-performing team environment.
• A robust benefits package:
  • Health, dental, and vision insurance
  • Life insurance
  • Short-and-long term disability
  • Paid time off (PTO)
  • 401k retirement plan with employer match
  • Annual Professional Development Reimbursement Program
  • And more!

What you will do:

• Monitor and analyze security alerts generated from endpoints, IDS/IPS, NetFlow, SIEM platforms, and custom security sensors to identify potential threats, compromises, and unauthorized activity across customer networks and systems.
• Conduct Tier 1/Tier 2 security analysis by reviewing large-scale log data, pivoting across multiple data sources, and correlating evidence to support cyber threat investigations and incident response activities.
• Investigate and triage security events, escalating validated incidents and high-priority alerts to senior SOC analysts while providing supporting evidence and analysis.
• Assist in identifying malicious activity, indicators of compromise (IOCs), attack patterns, and adversary behaviors affecting customer environments.
• Document investigative activities, findings, recommendations, and response actions within case management, ticketing, and knowledge management systems.
• Support senior SOC personnel in the development and distribution of incident reports, executive summaries, and technical findings to customers and leadership stakeholders.
• Maintain awareness of emerging cybersecurity threats, vulnerabilities, and attack techniques to support continuous improvement of SOC operations and detection capabilities.
• Collaborate with cybersecurity team members to support incident response efforts, threat detection initiatives, and operational security monitoring activities.

What you will bring:

• Active DoD Top Secret/Sensitive Compartmented Information (TS/SCI) security clearance.
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field. Additional relevant experience, military training, or cybersecurity certifications may be substituted in lieu of a degree.
• 10+ years of experience in cybersecurity operations, incident response, computer network defense (CND), cyber threat analysis, or a related cyber defense discipline.
• Experience working within a Security Operations Center (SOC) environment supporting security monitoring, incident detection, triage, investigation, and response activities.
• Demonstrated experience performing Computer Network Defense (CND) functions across the Protect, Detect, Respond, and Sustain mission areas.
• Strong understanding of the cyber threat lifecycle, attack methodologies, threat actors, attack vectors, indicators of compromise (IOCs), and adversary tactics, techniques, and procedures (TTPs).
• Strong understanding of TCP/IP networking, common ports and protocols, traffic analysis, system administration concepts, OSI model principles, defense-in-depth strategies, and enterprise security architectures.
• Excellent analytical, troubleshooting, written communication, and verbal communication skills with the ability to prepare detailed technical reports and investigative findings.
• Current DoD 8570 IAT Level II (or higher) certification prior to start date, including one of the following:
• CompTIA Security+ CE
• ISC2 SSCP
• GIAC GSEC
• Equivalent DoD-approved certification
• Ability to obtain and maintain a DoD 8570 CSSP Analyst certification within six months of hire, such as:
• CompTIA CySA+
• EC-Council CEH
• GIAC GCIA
• Equivalent DoD-approved certification
• Ability and willingness to support shift operations, including weekends, holidays, and alternate schedules as mission requirements dictate.

How will you wow us:

• Experience analyzing large log datasets, NetFlow, packet captures, and attack artifacts during investigations.
• Hands-on experience with SIEM platforms such as Splunk, ArcSight, QRadar, or McAfee ESM.
• Proficiency with security tools including IDS/IPS, HBSS/HIPS, antivirus, packet capture, and network forensics.
• Knowledge of malware analysis techniques and investigative methodologies.
• Experience working in Unix/Linux environments.
• Scripting or programming experience (Python, PowerShell, Bash, or similar).
• Strong written and verbal communication skills with the ability to produce technical reports.
• Familiarity with Intelligence-Driven Defense, the Cyber Kill Chain, and MITRE ATT&CK frameworks.
• Experience with threat hunting and advanced threat detection activities.

JCS Solutions (JCS) is a premier technology firm providing innovative solutions and high-quality services in defense, national security, and civilian sectors. JCS offers enterprise-wide solutions including cloud computing, software development, cybersecurity, digital modernization, and management consulting for the federal government. At JCS, we elevate our customers’ mission through the application of technology and professional services. Our commitment to investing in our workforce drives innovation and progress for our clients, employees, and communities.

JCS is both a Great Place to Work and a Top Places to Work certified company.

Our employees embody our core values, and we are looking for others who do too!

• Customer Experience: Strive for excellence and delight our clients
• Innovation: Embrace creative thinking to enable continual growth and powerful solutions
• Accountability: Take ownership of and pride in our actions and service delivery
• Inspire: Be inspired to be your best self and have fun in the process
• Integrity: Do the right thing, the right way, every time!
• Stewardship: The careful and responsible management of something entrusted to our care.

At JCS Solutions, compensation is based on a number of factors such as location, qualifications, and applicable contract terms. The general salary range for this position is as follows: $105,000.00 - $150,000.00

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to any protected status protected by applicable federal, state, or local laws.

NOTICE: Please be aware that all JCS Solutions communications related to job interviews and offers from our recruiting team will only come from @JCSSolutions.com. We want to emphasize that we do not conduct any interviews over Discord, Slack, Skype, Zoom, or any chat app.