DCO Threat Defender & Incident Response Analyst

Booz Allen Hamilton; United States; On-site; USD 69,000 - 158,000; Full time

Job summary

Booz Allen Hamilton is seeking a Defensive Cyber Operations Analyst to monitor real-time threats, analyze complex cyber events, and protect mission-critical networks supporting U.S. defense operations.

You will use tools like Splunk, HBSS, and Defender to identify malicious activity, unify threat data, and elevate incidents with clear urgency. This role advances cyber defense across multiple commands and partners.

Qualifications

• Experience supporting DCO within a shift work-based 24x7 operations center.
• Experience advising on network security issues and enforcing vulnerability mitigation policies and procedures
• Experience developing reports, presenting daily network security summaries, and communicating clearly with senior leaders and varied audiences
• Experience with customer queries and reviewing data for component units
• Knowledge of management and monitoring of network security components, devices, and services
• Knowledge of cybersecurity tools such as Splunk, HBSS, Microsoft Defender, or Security Onion
• Ability to support Panama Schedule DCO Watch Stander shifts, holidays, and weekends on an as-needed basis
• TS/SCI clearance
• HS diploma or GED and 2+ years of experience conducting DCO, SOC, JCC, or NOSC mission operations, or Bachelor’s degree and 1+ years of experience conducting DCO, SOC, JCC, or NOSC mission operations
• Security+ or DoDM 8140.03 Certification

Responsibilities

• Support DCO event and incident response, documenting and escalating cyber events.
• Coordinate with enterprise-wide cyber defense partners and respond to CPCON changes.
• Assist with operational briefs and help implement proactive and reactive security measures.
• Produce daily reporting that enhances commander awareness.

Skills

DCO operations

Threat monitoring

Security incident reporting

Communication with leadership

Education

HS diploma or GED

Bachelor’s degree (related field)

Tools

Assured Compliance Assessment Solution

Splunk

HBSS

Microsoft Defender

Security Onion

Job description

Booz Allen Hamilton is seeking a Defensive Cyber Operations Analyst to monitor real-time threats, analyze complex cyber events, and protect mission-critical networks supporting U.S. defense operations.

You will use tools like Splunk, HBSS, and Defender to identify malicious activity, unify threat data, and elevate incidents with clear urgency. This role advances cyber defense across multiple commands and partners.