SOC Operations Analyst - 175027

Piper Companies; Fort Meade (MD); On-site; USD 125,000 - 145,000; Full time

Job summary

Zachary Piper Solutions in Fort Meade, MD is seeking a SOC Operations Analyst to support the DISA DCDC Cyber Operations Center. This full-time, onsite role focuses on incident response, threat detection, network defense, and cyber operations within a DoD environment.

The candidate will monitor DoDIN, provide leadership in incident responses, and coordinate with DoD components. Requirements include a TS/SCI clearance and Security+ or equivalent certification.

Qualifications

• Active DoD TS/SCI Clearance required with eligibility for CI polygraph.
• Security+ or equivalent DoD 8570/8140‑compliant certification.
• 4+ years in cybersecurity, network defense, SOC, or cyber operations.
• Experience in a CNDSP environment or DoD cyber operations environment.
• Experience with monitoring/analysis tools such as ArcSight, Splunk, JIMS, CSAAC.

Responsibilities

• Execute real-time cyber operations per mission requirements, including incident handling and event triage.
• Lead and support complex security incident responses from post-breach analysis to threat actor identification.
• Utilize SIEM platforms to monitor, investigate, and resolve security incidents.
• Conduct proactive threat hunting through network traffic, logs, and indicators of compromise.
• Coordinate DoD cyber operations and assess defensive measures.

Skills

Threat detection

Incident response

Network analysis

SIEM use

TCP/IP networking

Education

Bachelor's Degree in Cybersecurity, IT, CS

Tools

ArcSight

JIMS

CSAAC

Splunk

PCAP analysis tools

Job description

Available Shifts:

• Team 1: 0500-1500 | Monday-Thursday


• Team 3: 2100-0700 | Monday-Thursday

Zachary Piper Solutions is currently seeking a SOC Operations Analyst to support the DISA DCDC Cyber Operations Center based in Fort Meade, MD. This position is a full-time role that will be fully onsite. This position is critical in safeguarding DoD networks and assets, ensuring robust security measures and procedures are maintained. As a SOC Operations Analyst, you will play a pivotal role in incident response, threat detection, network defense, situational awareness, and cyber operations within a high-stakes environment supporting mission‑critical Department of Defense cybersecurity operations.

Key Responsibilities:

• Execute cyber operations in real time in accordance with mission requirements, including incident handling, event triage, network analysis, threat detection, trend analysis, metric development, vulnerability information dissemination, and adherence to DoD Computer Network Defense Service Provider (CNDSP) methodologies.


• Lead and support complex security incident responses, from post‑breach analysis to threat actor identification, leveraging netflow, PCAP analysis, security event logs, and network telemetry to identify and mitigate threats.


• Utilize SIEM and cybersecurity platforms including ArcSight, JIMS, CSAAC, Splunk, and related technologies to monitor, investigate, and resolve security incidents.


• Conduct proactive threat hunting and cyber defense operations through the analysis of network traffic, system logs, indicators of compromise, malware activity, and security alerts.


• Monitor the DoDIN environment for vulnerabilities, IAVA compliance, and emerging cyber threats that may impact mission operations.


• Coordinate Computer Network Defense operations with DoD Components, Services, Agencies, and Field Activities while assessing operational impacts and recommending defensive measures.


• Provide defense‑wide situational awareness through analysis, intelligence integration, information sharing, and coordinated reporting efforts.


• Generate operational reports, situation reports (SITREPs), executive briefings, metrics, and threat assessments for senior leadership.


• Collaborate with intelligence and cyber operations teams to identify indications and warnings of potential threats targeting DoD networks and information systems.


• Recommend INFOCON changes and mitigation actions in response to cyber incidents, unauthorized activities, and emerging threat campaigns.


• Communicate daily with internal teams and mission partners to secure both cloud and on‑premises environments.


• Support a mission‑focused customer with high operational expectations and national security objectives.


• Utilize technical expertise, analytical problem‑solving skills, and operational judgment to address evolving cybersecurity challenges.

Requirements:

• Active DoD TS/SCI Clearance with eligibility for a Counterintelligence Polygraph.


• Security+ or equivalent DoD 8570/8140‑compliant certification


• 4+ years of cybersecurity, network defense, SOC, or cyber operations experience.


• Bachelor's Degree in Cybersecurity, Information Technology, Computer Science, or a related technical field. Additional relevant experience may be substituted for degree requirements.


• Experience working within a Computer Network Defense Service Provider (CNDSP) environment or supporting Computer Network Defense operations.


• Experience with cybersecurity monitoring and analysis tools such as ArcSight, JIMS, CSAAC, Splunk, PCAP analysis tools, or equivalent platforms.


• Strong understanding of TCP/IP networking, routing, DNS, network communications, intrusion detection/prevention systems, firewalls, proxies, and network traffic analysis.


• Familiarity with malware analysis, cyber threat lifecycle concepts, attack vectors, and vulnerability exploitation techniques.


• Experience providing operational updates, threat briefings, executive reporting, and recommendations to senior leaders.


• Working knowledge of DoD cyber operations, threat and vulnerability analysis, and Joint Operational Planning Process (JOPP).

Compensation Includes:

• Salary Range: $125,000 - $145,000 (depending on experience)


• Full Benefits: Medical, Dental, Vision, 401(k), PTO, and Sick Leave as required by law

This job posting opens on 9/24/2026 and will remain open for at least 30 days from the posting date

Keywords: Cybersecurity, Cyber Operations, SOC Analyst, Security Operations Center, Incident Response, Splunk, ArcSight, CSAAC, JIMS, Threat Hunting, Network Defense, Computer Network Defense, CNDSP, DISA, DoDIN, PCAP Analysis, Wireshark, Intrusion Detection, IDS, IPS, Network Security Monitoring, SIEM, Security Monitoring, Malware Analysis, Vulnerability Assessment, Threat Intelligence, Digital Forensics, Incident Handling, Threat Detection, Security Analysis, INFOCON, TS/SCI, Network Traffic Analysis, Cyber Threats, Threat Mitigation, Security Operations, Security Analytics, Homeland Security, Department of Defense, DoD Cybersecurity, Fort Meade Jobs, Cyber Defense, Security Clearance Jobs