SOC Operations Analyst - 175027

ZP Group; Fort Meade (MD); On-site; USD 125,000 - 145,000; Full time

Job summary

Zachary Piper Solutions is seeking a SOC Operations Analyst to support the DISA DCDC Cyber Operations Center based in Fort Meade, MD. This full-time, onsite role focuses on incident response, threat detection, and network defense within a DoD cybersecurity operations environment.

You will monitor security platforms, analyze logs and PCAPs, produce SITREPs and brief senior leaders, and coordinate with DoD components to strengthen cyber resiliency in mission-critical networks.

Qualifications

• Active DoD TS/SCI clearance required.
• Security+ or equivalent DoD 8570/8140-compliant certification.
• 4+ years of cybersecurity, network defense, SOC, or cyber operations experience.
• Bachelor's Degree in Cybersecurity, Information Technology, Computer Science, or a related field; additional experience may substitute for degree requirements.

Responsibilities

• Execute real-time cyber operations and incident handling per DoD requirements.
• Lead and support complex security incident responses, from post-breach analysis to threat actor identification.
• Utilize SIEM and cybersecurity platforms (ArcSight, JIMS, CSAAC, Splunk) to monitor, investigate, and resolve incidents.
• Conduct proactive threat hunting and cyber defense operations through traffic and log analysis.
• Monitor the DoDIN environment for vulnerabilities, IAVA compliance, and emerging threats.
• Coordinate DoD Computer Network Defense operations with DoD Components and Field Activities.

Skills

DoD TS/SCI Clearance

Incident Response

Threat Hunting

Network Defense

Threat Intelligence

Education

Bachelor's Degree in Cybersecurity/IT/CS

Tools

ArcSight

JIMS

CSAAC

Splunk

PCAP Analysis Tools

Job description

Available Shifts:

• Team 1: 0500-1500 | Monday-Thursday
• Team 3: 2100-0700 | Monday-Thursday

Zachary Piper Solutions is currently seeking a SOC Operations Analyst to support the DISA DCDC Cyber Operations Center based in Fort Meade, MD. This position is a full-time role that will be fully onsite. This position is critical in safeguarding DoD networks and assets, ensuring robust security measures and procedures are maintained. As a SOC Operations Analyst, you will play a pivotal role in incident response, threat detection, network defense, situational awareness, and cyber operations within a high-stakes environment supporting mission-critical Department of Defense cybersecurity operations.

Key Responsibilities:

• Execute cyber operations in real time in accordance with mission requirements, including incident handling, event triage, network analysis, threat detection, trend analysis, metric development, vulnerability information dissemination, and adherence to DoD Computer Network Defense Service Provider (CNDSP) methodologies.
• Lead and support complex security incident responses, from post-breach analysis to threat actor identification, leveraging netflow, PCAP analysis, security event logs, and network telemetry to identify and mitigate threats.
• Utilize SIEM and cybersecurity platforms including ArcSight, JIMS, CSAAC, Splunk, and related technologies to monitor, investigate, and resolve security incidents.
• Conduct proactive threat hunting and cyber defense operations through the analysis of network traffic, system logs, indicators of compromise, malware activity, and security alerts.
• Monitor the DoDIN environment for vulnerabilities, IAVA compliance, and emerging cyber threats that may impact mission operations.
• Coordinate Computer Network Defense operations with DoD Components, Services, Agencies, and Field Activities while assessing operational impacts and recommending defensive measures.
• Provide defense-wide situational awareness through analysis, intelligence integration, information sharing, and coordinated reporting efforts.
• Generate operational reports, situation reports (SITREPs), executive briefings, metrics, and threat assessments for senior leadership.
• Collaborate with intelligence and cyber operations teams to identify indications and warnings of potential threats targeting DoD networks and information systems.
• Recommend INFOCON changes and mitigation actions in response to cyber incidents, unauthorized activities, and emerging threat campaigns.
• Communicate daily with internal teams and mission partners to secure both cloud and on-premises environments.
• Support a mission-focused customer with high operational expectations and national security objectives.
• Utilize technical expertise, analytical problem-solving skills, and operational judgment to address evolving cybersecurity challenges.

Requirements:

• Active DoD TS/SCI Clearance with eligibility for a Counterintelligence Polygraph.
• Security+ or equivalent DoD 8570/8140-compliant certification
• 4+ years of cybersecurity, network defense, SOC, or cyber operations experience.
• Bachelor's Degree in Cybersecurity, Information Technology, Computer Science, or a related technical field. Additional relevant experience may be substituted for degree requirements.
• Experience working within a Computer Network Defense Service Provider (CNDSP) environment or supporting Computer Network Defense operations.
• Experience with cybersecurity monitoring and analysis tools such as ArcSight, JIMS, CSAAC, Splunk, PCAP analysis tools, or equivalent platforms.
• Strong understanding of TCP/IP networking, routing, DNS, network communications, intrusion detection/prevention systems, firewalls, proxies, and network traffic analysis.
• Familiarity with malware analysis, cyber threat lifecycle concepts, attack vectors, and vulnerability exploitation techniques.
• Experience providing operational updates, threat briefings, executive reporting, and recommendations to senior leaders.
• Working knowledge of DoD cyber operations, threat and vulnerability analysis, and Joint Operational Planning Process (JOPP).

Compensation Includes:

• Salary Range: $125,000 - $145,000 (depending on experience)
• Full Benefits: Medical, Dental, Vision, 401(k), PTO, and Sick Leave as required by law

This job posting opens on 9/24/2026 and will remain open for at least 30 days from the posting date

#LI-CB1

#LI-ONSITE

Keywords: Cybersecurity, Cyber Operations, SOC Analyst, Security Operations Center, Incident Response, Splunk, ArcSight, CSAAC, JIMS, Threat Hunting, Network Defense, Computer Network Defense, CNDSP, DISA, DoDIN, PCAP Analysis, Wireshark, Intrusion Detection, IDS, IPS, Network Security Monitoring, SIEM, Security Monitoring, Malware Analysis, Vulnerability Assessment, Threat Intelligence, Digital Forensics, Incident Handling, Threat Detection, Security Analysis, INFOCON, TS/SCI, Network Traffic Analysis, Cyber Threats, Threat Mitigation, Security Operations, Security Analytics, Homeland Security, Department of Defense, DoD Cybersecurity, Fort Meade Jobs, Cyber Defense, Security Clearance Jobs