Security Operations Center Analyst II

Vectrus, Inc; Orlando (FL); On-site; USD 75,000 - 110,000; Full time

Job summary

Vectrus, Inc in Orlando, Florida is seeking a Security Operations Center Analyst II to monitor, detect, and respond to cyber threats 24/7 for the Warfighter Training Readiness Solutions program under the U.S. Army.

The role emphasizes adherence to DoD cyber policies, RMF processes, and proactive defense of enterprise systems. The analyst will generate reports such as FISMA and RMF ConMon, maintain tools, and ensure compliance across central and remote locations.

Qualifications

• Hands-on experience in cybersecurity operations (protect, detect, respond, sustain).
• Strong technical skills in current and emerging cybersecurity technologies.
• Understands the full lifecycle of cyber threats and related TTPs.
• Strong written and verbal communication; able to produce clear technical reports.

Responsibilities

• Create and maintain RMF / cybersecurity documentation per DoDI 8510 and AR 25-2.
• Operate workstations and turn collected data into useful security information.
• Respond to security incidents, write and submit incident reports.
• Validate IAVAs with vulnerability scans for all supported baselines.
• Maintain and secure current and future system baselines and configs.
• Continuously monitor and test for security compliance.
• Use SIEM tools to analyze and correlate audit and event logs.
• Review security requirements, perform testing, and support RMF A&A/ATO.
• Monitor and control external communications and block unauthorized software/mobile code.
• Immediately report unauthorized network services to IA personnel.
• Configure and enable required security features.
• Centralize, review, and store audit records; perform regular audit reviews.
• Manage user accounts and ensure weekly audit log backups.
• Support annual FISMA activities tied to A&A and ATO requirements.
• Monitor systems 24/7/365 for suspicious activity.
• Analyze alerts and respond to cyber incidents.
• Follow and apply DoD cybersecurity policies and best practices.
• Put defensive measures in place to prevent attacks.
• Keep systems compliant and track key security metrics.
• Create required security reports (e.g., FISMA, RMF Continuous Monitoring, incident reports).
• Operate, maintain, and deploy enterprise cybersecurity tools across both central and remote locations.

Skills

Incident handling

SOC operations

DoD policies

SIEM expertise

Technical reporting

Education

B.S. Degree in Cybersecurity or related field

Associates Degree + 5 years in cybersecurity

Masters Degree + 1 year

Tools

ACAS

Splunk

ESS

Cisco ASA Firewalls & Firepower IPS

STIGs & DISA STIG Viewer

SRGs & SCC/SCAP

Windows & RHEL Linux

Job description

Overview

Security Operations Center Analyst II - Orlando, Florida

Company Overview Statement:

Working across the globe, V2X builds smart solutions designed to integrate physical and digital infrastructure from base to battlefield. We bring 120 years of successful mission support to improve security, streamline logistics, and enhance readiness. Aligned around a shared purpose, our $4.5B company and 16,000 people work alongside our clients, here and abroad, to tackle their most complex challenges with integrity, respect, responsibility, and professionalism.

Job Summary:

Responsible for cybersecurity operations, incident response, and defensive cyber measures across both centralized and distributed locations in support of the Warfighter Training Readiness Solutions (W-TRS) program under the U.S. Army PEO STRI. The role involves continuous 24×7×365 monitoring, analysis, and response to cyber threats, ensuring adherence to best practices and operational procedures for defensive cyber operations.

The analyst proactively implements defense strategies, maintains compliance and reporting metrics, and ensures alignment with DoD cybersecurity policies. Additionally, they generate reports related to FISMA, RMF ConMon, and security incidents while operating, maintaining, and deploying enterprise cyber tools.

Responsibilities

• Create and maintain RMF / cybersecurity documentation per DoDI 8510 and AR 25-2
• Operate workstations and turn collected data into useful security information
• Respond to security incidents, write and submit incident reports
• Validate IAVAs with vulnerability scans for all supported baselines
• Maintain and secure current and future system baselines and configs
• Continuously monitor and test for security compliance
• Use SIEM tools to analyze and correlate audit and event logs
• Review security requirements, perform testing, and support RMF A&A/ATO
• Monitor and control external communications and block unauthorized software/mobile code
• Immediately report unauthorized network services to IA personnel
• Configure and enable required security features
• Centralize, review, and store audit records; perform regular audit reviews
• Manage user accounts and ensure weekly audit log backups
• Support annual FISMA activities tied to A&A and ATO requirements
• Monitor systems 24/7/365 for suspicious activity
• Analyze alerts and respond to cyber incidents
• Follow and apply DoD cybersecurity policies and best practices
• Put defensive measures in place to prevent attacks
• Keep systems compliant and track key security metrics
• Create required security reports (e.g., FISMA, RMF Continuous Monitoring, incident reports)
• Operate, maintain, and deploy enterprise cybersecurity tools across both central and remote locations

Qualifications

• Hands-on experience in cybersecurity operations (protect, detect, respond, sustain)
• Strong technical skills in current and emerging cybersecurity technologies
• Understands the full lifecycle of cyber threats and related TTPs
• Strong written and verbal communication; able to produce clear technical reports

Desired Qualifications:

• 3+ years of Incident handling experience
• Experience supporting DoD / U.S. Army / Federal Government
• Hands-on with: ACAS, Splunk, ESS, Cisco ASA Firewalls & Firepower IPS, SRGs, STIGs, DISA STIG Viewer, SCC/SCAP, Evaluate STIG, Windows, and RHEL Linux
• Prior experience as a SOC Analyst I or similar cyber role within a CSSP environment

Degree & Experience:

• B.S. Degree and 3 years Relevant Experience in Cybersecurity and Information Assurance
• Associates Degee and 5 years Relevant Experinece in Cybersecurity and Information Assurance.
• Masters Degree and 1 years Relevant Experience

Certifications:

• Desired Certification: CYSA+

Location:

Orlando, Florida

Clearance:

Secret

EEO Statement:

At V2X, we are deeply committed to both equal employment opportunity, including protection for Veterans and individuals with disabilities, and fostering an inclusive and diverse workplace. We ensure all individuals are treated with fairness, respect, and dignity, recognizing the strength that comes from a workforce rich in diverse experiences, perspectives, and skills. This commitment, aligned with our core Vision and Values of Integrity, Respect, and Responsibility, allows us to leverage differences, encourage innovation, and expand our success in the global marketplace, ultimately enabling us to best serve our clients.