Junior Defensive Cyber Operator

JFL CONSULTING, LLC; Fort Belvoir (VA); On-site; USD 75,000 - 110,000; Full time

Benefits offered by this job

Salary: $75k-$110k per year

100% employer-paid medical, dental and

Job summary

JFL Consulting, LLC is seeking a motivated Junior Defensive Cyber Operator to join a traveling mobile defensive cyber operations assessment team supporting DoD customers from Fort Belvoir, VA. The role centers on collecting and analyzing network traffic, conducting vulnerability scans, and documenting findings for remediation.

This on-site position requires TS/SCI clearance, a technical bachelor's degree (or 10 years related experience), and willingness to travel up to 30–50% to CONUS/OCONUS

Qualifications

• Bachelor's degree required or 10 years of directly related operational experience in lieu of degree.
• Active TS/SCI clearance required.
• DoD 8140/8570 IAT Level II certification (e.g., Security+, GCIH, CYSA+) and CSSP certs
• Foundational knowledge of TCP/IP, network protocols, and security best practices

Responsibilities

• Support planning, preparation, and execution of defensive cyber assessments.
• Assist in safely connecting assessment equipment to customer networks.
• Configure and operate network taps, sensors, and data-collection devices.
• Capture and analyze network traffic using packet-analysis tools.
• Review traffic for unauthorized activity and indicators of compromise.
• Document technical observations and prepare customer briefings.

Skills

Security clearance TS/SCI

Packet-analysis

Vulnerability assessment

Network monitoring

Team collaboration

Education

Bachelor's degree in technical field

Tools

Packet-analysis tools

Vulnerability-scanning tools

Linux

Python

PowerShell

Job description

Description

Job Title: Junior Defensive Cyber Operator

Place of Performance: Fort Belvoir, VA

Mandatory Requirements: TS/SCI

Experience Level: Jr Level (2+ years)

On-Site, hybrid, remote: On-Site

Travel: Up to 20-50% (CONUS & OCONUS) travel

About JFL Consulting: With more than 20 years of securing some of the U.S. Department of Defense and the Intelligence Community’s most critical networks, JFL Consulting, LLC provides advanced network security solutions to a range of US Government and US commercial clients. Our cybersecurity operators are experts at assessing and defending mission-critical data and the networks that facilitate their operation. We are focused on delivering advanced products and industry best practices that meet each customer’s unique requirements. Visit www.jflconsulting.com

What We Offer

• Salary: $75k- $110k
• 100% employer-paid medical, dental, and vision premiums for employees and dependents
• Flexible Spending Accounts (healthcare, dependent care, and commuter)
• Life insurance, short-term disability and long-term disability
• 401(k) with immediate vesting of company contribution
• Generous PTO policy (15 vacation, 5 sick, 2 personal days, 11 holidays)
• We support your growth through certification reimbursement, dedicated professional development funding, and company-provided access to online learning platforms

Job Overview

JFL Consulting is currently seeking a motivated Junior Defensive Cyber Operator to join a traveling mobile defensive cyber operations assessment team. The successful candidate will support network vulnerability and security assessments designed to identify cybersecurity risks and recommend remediation actions for customers. Working under the direction of a Senior Cyber Operator, the Junior Defensive Cyber Operator will assist with collecting and analyzing full-packet-capture network traffic, identifying unauthorized or potentially malicious activity, conducting vulnerability and configuration-compliance scans, and developing network models. The Junior Defensive Cyber Operator will also help document technical findings and prepare reports and briefings for customers.

This position is well suited for someone with foundational cybersecurity or networking experience who wants to develop hands-on skills in network forensics, vulnerability assessment, packet analysis, and network modeling. JFL Consulting can provide structured training, mentoring, and on-the-job experience to help the selected candidate progress toward independently performing all aspects of an assessment. The team operates in a fast-paced environment and travels to customer locations to complete mission objectives. Candidates must be comfortable learning new tools, troubleshooting technical problems, working collaboratively, and adapting to changing mission requirements.

Key Responsibilities

• Support the technical planning, preparation, and execution of defensive cyber assessments
• Work under the supervision of a Senior Cyber Operator to safely connect assessment equipment to customer networks
• Assist with configuring and operating network taps, sensors, and other data-collection equipment
• Capture and analyze network traffic using packet-analysis and network-security monitoring tools
• Review network traffic for unauthorized activity, security weaknesses, indicators of compromise, and abnormal behavior
• Assist with conducting credentialed and non-credentialed vulnerability and configuration-compliance scans
• Support network discovery, configuration collection, and network-modeling activities
• Review assessment results and help identify potential vulnerabilities, misconfigurations, and cybersecurity risks
• Document technical observations, supporting evidence, and recommended mitigation actionsAssist with preparing assessment reports, technical briefings, and customer out-brief presentations
• Support the development and maintenance of assessment-specific network connection and authorization documentation
• Coordinate with team members, customer technical personnel, site points of contact, and subject-matter experts
• Install, configure, operate, and troubleshoot cybersecurity assessment hardware and software
• Participate in user-acceptance testing, mission rehearsals, equipment inventories, and toolkit preparation
• Follow established standard operating procedures, safety requirements, and rules of engagement
• Participate in technical training and on-the-job development to achieve qualification across all assessment functions
• Maintain assessment equipment and assist with post-assessment equipment sanitization and reconstitution
• Provide recommendations for improving tools, training, processes, and standard operating procedures
• Travel approximately 30–50%, including occasional travel on short notice
• Perform additional duties as assigned

Requirements

Required Qualifications

• Possess a Bachelor’s degree in a technical field

In lieu of a degree, 10 years of directly related operational experience may be substituted

Active TS/SCI clearance

Candidates must possess and maintain, or be able to obtain within the timeframe permitted by the contract, the certifications required for the assigned DoD cybersecurity workforce role, one of each of the following:

• DoD 8140/8570 IAT Level II certification (e.g., Security+, GCIH, CYSA+)
• DoD 8140/8570 CSSP certification (e.g., CySA+, CEH, PenTest+, or another contract-approved equivalent.)

Preferred Qualifications

• Direct experience with DOD Cyber Protection Teams
• Prior military, federal government, or DoD cybersecurity experience
• Experience supporting cybersecurity assessments, incident response, network operations, or vulnerability-management activities
• Hands-on experience with packet-analysis toolsFamiliarity with vulnerability-scanning tools
• Familiarity with network-discovery, configuration-collection, or network-modeling tools
• Experience using network taps, SPAN ports, packet brokers, or other network-monitoring technologies
• Familiarity with Linux distributions
• Basic scripting or programming experience using Python, PowerShell, Bash, Perl, C, or a similar language
• Familiarity with DoD system authorization, vulnerability-management, and Information Assurance Vulnerability Alert processes
• Demonstrated interest in network security, network forensics, threat analysis, or defensive cyber operations
• Relevant military technical training, cybersecurity certification programs, technical schools, and documented hands‑on laboratory experience may be considered when evaluating a candidate’s qualifications
• Foundational knowledge of TCP/IP, network protocols, routing, switching, firewalls, and common network services.
• Familiarity with Windows and Linux operating environments
• Basic understanding of cybersecurity vulnerabilities, security controls, network monitoring, and risk mitigation
• Ability to install, configure, operate, and troubleshoot computer hardware and software
• Ability to follow technical procedures and safely connect equipment to operational networks
• Ability to analyze technical information and accurately document observations and findings
• Strong communication, teamwork, organizational, and problem‑solving skills
• Ability and willingness to learn unfamiliar cybersecurity tools and technical processes
• Ability to obtain and maintain any additional customer-specific access, training, or certification requirements

JFL Consulting, LLC is an Equal Opportunity Employer. We do not discriminate against any applicant for employment on any legally recognized basis including, but not limited to: race, religion or creed, color, national origin, sex, age, disability, marital status, sexual orientation, genetic information, veteran status, status with regard to public assistance or any other protected class under federal, state or local statute. It is also the policy of JFL Consulting, LLC to provide reasonable accommodations for qualified individuals with disabilities.