Cyber Watch Officer
Listed on 2026-06-18
-
IT/Tech
Cybersecurity, Network Security, Information Security
Job Description
Must have a current Top Secret/SCI Clearance and CompTIA Security+ CE Certified.
Location:
Fort Meade, MD / DISA Headquarters.
- SIEM tool experience (Arc Sight, Splunk, Wireshark, etc)
- Experience conducting packet capture (PCAP) analysis
- Familiarization with STIGS process and structure
The Cyber Security Analyst will enable Command and Control (C2) of the Department of Defense Information Network (DODIN) by ensuring its overall health through 24/7 monitoring, directing, controlling, coordination, de-conflicting, synchronizing, and reporting the current status to JFHQ-DODIN staff.
Identify and characterize cyber threats to Department of Defense Information Networks (DODIN) through intelligence, operational reporting, and network information.
Centrally coordinate and/or recommend CND operations that impact more than one DoD Component.
Coordinate Computer Network Defense (CND) operations with DoD Component Commands/Services/Agencies/Field Activities (CC/S/A/FA) and monitor and report effect of DCO-IDM operations on CC/S/A/FA missions.
Have knowledge of DoD Computer Network Defense with an understanding of the lifecycle of the network threats, attack vectors, and network vulnerability exploitation.
Primary Responsibilities- Incident Handling
- Triage of events
- Network analysis and threat detection
- Tend analysis
- Metric development
- Vulnerability information Dissemination
- DoD CSSP Methodology
- Experience coordinating and/or recommending CND operations that affect more than one DoD Component.
- Experience conducting Packet Capture (PCAP) Analysis
- Experience with security information and event management (SIEM) systems
- Basic understanding of intelligence tool
- Experience with and/or a working knowledge of the following :
- Networking infrastructure: routers, switches, and web security gateway
- TCP/IP Protocols and Services
- Identification and Access Management
- Firewalls, Access Control Lists
- Intrusion Detection/Prevention Systems (IDS/IPS) Configuration Management
- Demilitarized Zone (DMZ)
- SIEM and JIMS Reports
- Data backup/Data Loss Prevention (DLP)
- Host Base Security Systems (HBSS)
- Enterprise Mission Assurance Support Service (eMASS)
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).