Operations Enhancement Analyst - Junior & Mid-Level U.S. Citizenship & CBP Trust Suitability

Ashburn, VA

• Location: Primarily onsite at a government site in Ashburn, VA. Specific worksite expectations will be confirmed for the assignment.
• Type: Full-time, W-2
• Compensation: $68, annually, depending on experience, qualifications, and assignment.
• Experience: 3+ years of relevant experience

Anticipated annual salary ranges by level are:

• Junior: $68,
• Mid-Level: $81,

Join Via Logic supporting U.S. Customs and Border Protection cybersecurity operations. As an Operations Enhancement Analyst, you'll help strengthen and mature Security Operations Center capabilities by identifying opportunities to improve processes, automation, security tooling, detection, and operational visibility.

You'll work alongside cybersecurity and government teams to improve how security operations are performed—from automating workflows and refining playbooks to tuning security tools, developing security content, and measuring whether operational improvements are delivering results.

This posting covers both Junior and Mid-Level Operations Enhancement Analyst openings. Both levels have a 3+ year hiring threshold for these openings. We'll consider the depth and relevance of your experience against the available positions to determine the appropriate level.

Due to CBP requirements, applicants must:

• Be a U.S. citizen.
• Be able to obtain and maintain the required CBP High Trust background investigation and suitability determination for access to government facilities and systems.
• Be available to work primarily onsite at a government site in Ashburn, VA. Specific worksite and travel expectations will be confirmed for the assignment.

• Support the continuous improvement and maturation of Security Operations Center processes, capabilities, and visibility.
• Help develop, improve, and maintain security operations processes, playbooks, work instructions, and operational workflows.
• Author and maintain automation scripts and workflows within Security Orchestration, Automation, and Response (SOAR) platforms.
• Troubleshoot and resolve issues involving SOAR code, integrations, workflows, and supporting infrastructure.
• Help define and track operational metrics, statistics, and key performance indicators (KPIs) to measure the effectiveness of automation and security-tool tuning.
• Identify gaps in detection capabilities and contribute strategies and recommendations for improving detection of attacker tactics, techniques, and behaviors.
• Support baselining of enterprise activity to help distinguish normal from abnormal behavior.
• Recommend improvements to event-monitoring policies, indicators, and alerts across technologies such as SIEM, firewalls, IDS, cloud services, email, DLP, and EDR.
• Draft, test, modify, and maintain security content, including signatures and alerts used by security monitoring technologies.
• Support configuration, tuning, maintenance, and policy management for network, endpoint, and mobile security tools.
• Review security-tool policies for outdated rules, signatures, and blocks and recommend appropriate updates.
• Research and test new tools, technologies, and techniques that may improve operational efficiency or enterprise visibility.
• Help communicate newly created or updated security content to the teams that use it.

• 3+ years of relevant professional experience supporting cybersecurity, security operations, security engineering, automation, or a related technical area.
• Experience analyzing operational or technical processes and identifying opportunities to improve effectiveness, efficiency, or visibility.
• Familiarity with Security Operations Center processes and technologies used for monitoring, detection, and response.
• Experience developing or maintaining technical documentation such as playbooks, workflows, work instructions, or Standard Operating Procedures.
• Ability to analyze technical information, troubleshoot issues, and translate findings into practical recommendations.
• Ability to communicate technical findings clearly and collaborate with security analysts, engineers, government partners, and other technical teams.

We are considering candidates at two levels:

• Junior - 3+ years: You bring relevant cybersecurity or security operations experience and can contribute to process improvement, technical documentation, security tooling, automation, or…