Watch Analyst / Active Top Secret

Peraton; Washington; On-site; USD 90,000 - 130,000; Full time

Job summary

Peraton is seeking a Watch Analyst to support its Federal Strategic Cyber team, providing critical threat monitoring, analysis, and reporting within a 24/7 Operations Center in Washington, DC.

The ideal candidate combines cyber/critical infrastructure experience with strong research and communication skills, and the ability to function in a high-tempo, mission-critical federal environment.

Qualifications

• Bachelor's degree and 2 years of relevant experience or 4 years of experience in lieu of degree.
• Excellent written and verbal communication skills.
• Broad capabilities in research, analysis, and report writing.

Responsibilities

• Threat Monitoring: track classified databases, incident systems, alerting services, and open-source intel for threats.
• Incident Triage and Analysis: assess cyber, physical, and comms incidents for severity and impact.
• Situational Awareness and Reporting: produce timely, actionable reports for leadership and partners.
• Incident Coordination: collaborate with team and partners to document incidents through resolution.
• Operational Support: work in a fast-paced, high-tempo environment under a DHS/CISA framework.
• Security and Confidentiality: adhere to handling procedures for classified information.
• Systems and Technical Support: operate and troubleshoot IT systems used in daily operations.
• Team Collaboration: maintain awareness and continuity across shifts.
• Additional Duties: perform other operational support activities as directed.

Skills

Written communication

Verbal communication

Research and analysis

Report writing

Open-source analysis

NIMS knowledge

Education

Bachelor's degree

Tools

Microsoft Office

Job description

Basic Qualifications:

• Bachelor’s degree and 2 years of relevant experience.
  • An additional 4 years of experience may be substituted in lieu of a bachelor's degree.
• Demonstrated excellent written and verbal communication skills.
• Must have broad capabilities and expertise in research, analysis, and report writing skills.
• Must be flexible and able to work within a 24x7x365 operations support environment.
• Experience with open-source analysis and alerting systems.
• Knowledge of Microsoft Office automation solutions.
• Must have experience/expertise in one or more critical infrastructure sectors (as defined by HSPD-7 and the NIPP), cyber and/or emergency management.
• Must have Knowledge of National Incident Management System (NIMS) structure, emergency management operations, and background knowledge of one (1) or more critical infrastructure sectors.
• Must complete FEMA IS-100.c, IS-453, IS-520, IS-545.a, IS-551, IS-700.b, IS-800.d, IS-860.c and IS-1300 before first day on the contract.
• U.S. citizenship is required.
• An active Top Secret security clearance required with ability to obtain SCI.
  • In addition, selected candidate must be able to obtain and maintain a favorably adjudicated DHS background investigation for continued employment.

Preferred Qualifications:

• Specialized operations center experience.
• Experience in drafting and publishing national level reporting.
• Experience with email triage and requests for information (RFIs).
• Experience as an All-Source Intelligence Analyst in Joint Operations Center and/or Fusion Center.
• Experience with cyber incident management and analysis.
• Obtained Cyber certifications (i.e., CompTIA Security+)
• Experience with Knowledge Management Systems and ServiceNow.
• Has the ability to read technical cyber reporting, including IOCs and TTPs, and be able to extract the important information to provide clear and concise reporting for a non-technical audience.

Peraton is seeking a Watch Analyst to support its Federal Strategic Cyber team in Washington, DC.

• Location: Washington, DC | On-site
• Work Schedule: 24/7/365 Operations Center | Shift Work

Position Overview:

This position supports the Department of Homeland Security (DHS), Cybersecurity and Infrastructure Security Agency (CISA), within a 24/7 classified Operations and Watch Center.

The Operations Center serves as a central hub for monitoring, assessing, and coordinating responses to emerging cyber, physical, and infrastructure threats impacting national security. The team provides critical situational awareness and actionable intelligence to federal leadership, law enforcement, and government stakeholders to help protect the nation's critical infrastructure.

Key Responsibilities

• Threat Monitoring: Monitor classified databases, incident management systems, alerting services, news outlets, social media, and other open-source intelligence for emerging threats and incidents affecting critical infrastructure and national security.

• Incident Triage and Analysis: Conduct initial assessments of cyber, physical, and communications incidents to determine severity, potential impact, and appropriate reporting or escalation requirements.

• Situational Awareness and Reporting: Analyze and synthesize information to produce accurate, timely, and actionable reports and briefings for government leadership, law enforcement, and federal stakeholders.

• Incident Coordination: Collaborate with team members and government partners to track, coordinate, and document incidents through resolution.

• Operational Support: Work in a fast-paced, time-sensitive environment under the direction of a federal CISA Duty Officer, exercising sound judgment, critical thinking, and effective decision-making.

• Security and Confidentiality: Maintain strict adherence to classified information handling procedures, operational security protocols, and confidentiality requirements.

• Systems and Technical Support: Operate and maintain familiarity with communications and information technology systems used in daily operations. Identify and troubleshoot technical issues and coordinate resolution with appropriate support teams.

• Team Collaboration: Support continuous watch operations, maintain operational awareness, and ensure effective communication and continuity across shifts.

• Additional Duties: Perform other operational support activities as directed by the government customer.

Work Environment and Schedule:

• Position is 100% on-site in Washington, DC, within a classified Operations and Watch Center.

• Operations run 24 hours a day, 7 days a week, 365 days a year, including weekends and holidays.

• Shift assignments are based on operational requirements and may include rotating schedules.

• Candidates must be comfortable working in a high-tempo, mission-critical environment requiring attention to detail, sound judgment, and timely reporting.

Current Shifts Are:

• Shift 1: 0530-1530
  • Team A: Monday through Thursday
  • Team B: Tuesday through Friday
• Shift 2: Monday-Friday from 1500-2300
• Shift 3: Monday-Friday from 2200-0600
• Shift 4: Saturday/Sunday from 0530-1800, Monday and Friday from 0530-1530
• Shift 5: Saturday/Sunday from 1730-0600 and two weekday overnight shifts

Ideal Candidate:

The ideal candidate brings experience in operations, intelligence analysis, cybersecurity, incident monitoring, or critical infrastructure protection, along with strong analytical, research, communication, and report-writing skills.

Successful candidates will demonstrate the ability to assess evolving situations, prioritize competing demands, communicate effectively, and support informed decision-making in a dynamic federal operations environment.