Junior Defensive Cyber Operator

JFL Consulting LLC; Fort Belvoir (VA); On-site; USD 75,000 - 110,000; Full time

Benefits offered by this job

Employer-paid health benefits

401(k) with immediate vesting

Generous PTO and holidays

Certification reimbursement

Job summary

JFL Consulting, LLC is seeking a Junior Defensive Cyber Operator to join a traveling mobile defense assessments team based at Fort Belvoir, VA.

Under a Senior Cyber Operator, you will support vulnerability assessments, packet analysis, and documentation, developing hands-on skills in network forensics and modeling. The role includes on-site duties and travel to customer locations.

Qualifications

• Bachelor’s degree in a technical field.
• Active TS/SCI clearance.
• DoD 8140/8570 IAT Level II certification (e.g., Security+, GCIH, CYSA+) and DoD 8140/8570 CSSP certification.

Responsibilities

• Support defensive cyber assessments and planning.
• Assist with safely connecting assessment equipment to customer networks.
• Capture and analyze network traffic using packet-analysis tools and monitoring tools.
• Review traffic for unauthorized activity and indicators of compromise.
• Assist with credentialed and non-credentialed vulnerability scans and configuration checks.
• Document observations and assist with assessment reports and briefings.

Skills

Packet analysis

Network forensics

Vulnerability assessment basics

DoD cybersecurity basics

Education

Bachelor’s degree in a technical field

Tools

Wireshark

Nessus

Nmap

Job description

About this position

Description:

Job Title: Junior Defensive Cyber Operator

Place of Performance: Fort Belvoir, VA

Mandatory Requirements: TS/SCI

Experience Level: Jr Level (2+ years)

On-Site, hybrid, remote: On-Site

Travel: Up to 20-50% (CONUS & OCONUS) travel

About JFL Consulting: With more than 20 years of securing some of the U.S. Department of Defense and the Intelligence Community’s most critical networks, JFL Consulting, LLC provides advanced network security solutions to a range of US Government and US commercial clients. Our cybersecurity operators are experts at assessing and defending mission-critical data and the networks that facilitate their operation. We are focused on delivering advanced products and industry best practices that meet each customer’s unique requirements. Visit www.jflconsulting.com

What We Offer:

• Salary: $75k- $110k
• 100% employer-paid medical, dental, and vision premiums for employees and dependents
• Flexible Spending Accounts (healthcare, dependent care, and commuter)
• Life insurance, short-term disability and long-term disability
• 401(k) with immediate vesting of company contribution
• Generous PTO policy (15 vacation, 5 sick, 2 personal days, 11 holidays)
• We support your growth through certification reimbursement, dedicated professional development funding, and company-provided access to online learning platforms

Job Overview:

JFL Consulting is currently seeking a motivated Junior Defensive Cyber Operator to join a traveling mobile defensive cyber operations assessment team. The successful candidate will support network vulnerability and security assessments designed to identify cybersecurity risks and recommend remediation actions for customers. Working under the direction of a Senior Cyber Operator, the Junior Defensive Cyber Operator will assist with collecting and analyzing full-packet-capture network traffic, identifying unauthorized or potentially malicious activity, conducting vulnerability and configuration‑compliance scans, and developing network models. The Junior Defensive Cyber Operator will also help document technical findings and prepare reports and briefings for customers.

This position is well suited for someone with foundational cybersecurity or networking experience who wants to develop hands‑on skills in network forensics, vulnerability assessment, packet analysis, and network modeling. JFL Consulting can provide structured training, mentoring, and on‑the‑job experience to help the selected candidate progress toward independently performing all aspects of an assessment. The team operates in a fast-paced environment and travels to customer locations to complete mission objectives. Candidates must be comfortable learning new tools, troubleshooting technical problems, working collaboratively, and adapting to changing mission requirements.

Key Responsibilities:

• Support the technical planning, preparation, and execution of defensive cyber assessments
• Work under the supervision of a Senior Cyber Operator to safely connect assessment equipment to customer networks
• Assist with configuring and operating network taps, sensors, and other data-collection equipment
• Capture and analyze network traffic using packet‑analysis and network‑security monitoring tools
• Review network traffic for unauthorized activity, security weaknesses, indicators of compromise, and abnormal behavior
• Assist with conducting credentialed and non‑credentialed vulnerability and configuration‑compliance scans
• Support network discovery, configuration collection, and network‑modeling activities
• Review assessment results and help identify potential vulnerabilities, misconfigurations, and cybersecurity risks
• Document technical observations, supporting evidence, and recommended mitigation actions
• Assist with preparing assessment reports, technical briefings, and customer out‑brief presentations
• Support the development and maintenance of assessment‑specific network connection and authorization documentation
• Coordinate with team members, customer technical personnel, site points of contact, and subject‑matter experts
• Install, configure, operate, and troubleshoot cybersecurity assessment hardware and software
• Participate in user‑acceptance testing, mission rehearsals, equipment inventories, and toolkit preparation
• Follow established standard operating procedures, safety requirements, and rules of engagement
• Participate in technical training and on‑the‑job development to achieve qualification across all assessment functions
• Maintain assessment equipment and assist with post‑assessment equipment sanitization and reconstitution
• Provide recommendations for improving tools, training, processes, and standard operating procedures
• Travel approximately 30–50%, including occasional travel on short notice
• Perform additional duties as assigned

Requirements:

Required Qualifications:

• Possess a Bachelor’s degree in a technical field

In lieu of a degree, 10 years of directly related operational experience may be substituted

• Active TS/SCI clearance

Candidates must possess and maintain, or be able to obtain within the timeframe permitted by the contract, the certifications required for the assigned DoD cybersecurity workforce role, one of each of the following

• DoD 8140/8570 IAT Level II certification (e.g., Security+, GCIH, CYSA+)
• DoD 8140/8570 CSSP certification (e.g., CySA+, CEH, PenTest+, or another contract‑approved equivalent.)

Preferred Qualifications:

• Direct experience with DOD Cyber Protection Teams
• Prior military, federal government, or DoD cybersecurity experience
• Experience supporting cybersecurity assessments, incident response, network operations, or vulnerability‑management activities
• Hands‑on experience with packet‑analysis tools
• Familiarity with vulnerability‑scanning tools
• Familiarity with network‑discovery, configuration‑collection, or network‑modeling tools
• Experience using network taps, SPAN ports, packet brokers, or other network‑monitoring technologies
• Familiarity with Linux distributions
• Basic scripting or programming experience using Python, PowerShell, Bash, Perl, C, or a similar language
• Familiarity with DoD system authorization, vulnerability‑management, and Information Assurance Vulnerability Alert processes
• Demonstrated interest in network security, network forensics, threat analysis, or defensive cyber operations
• Relevant military technical training, cybersecurity certification programs, technical schools, and documented hands‑on laboratory experience may be considered when evaluating a candidate’s qualifications
• Foundational knowledge of TCP/IP, network protocols, routing, switching, firewalls, and common network services.
• Familiarity with Windows and Linux operating environments
• Basic understanding of cybersecurity vulnerabilities, security controls, network monitoring, and risk mitigation
• Ability to install, configure, operate, and troubleshoot computer hardware and software
• Ability to follow technical procedures and safely connect equipment to operational networks
• Ability to analyze technical information and accurately document observations and findings
• Strong communication, teamwork, organizational, and problem‑solving skills
• Ability and willingness to learn unfamiliar cybersecurity tools and technical processes
• Ability to obtain and maintain any additional customer‑specific access, training, or certification requirements

JFL Consulting, LLC is an Equal Opportunity Employer. We do not discriminate against any applicant for employment on any legally recognized basis including, but not limited to: race, religion or creed, color, national origin, sex, age, disability, marital status, sexual orientation, genetic information, veteran status, status with regard to public assistance or any other protected class under federal, state or local statute. It is also the policy of JFL Consulting, LLC to provide reasonable accommodations for qualified individuals with disabilities.