Senior CND Analyst — CYBERCOM SOC Operations

Senior CND Analyst — CYBERCOM SOC Operations

USCYBERCOM's $52M SOC Operations recompete will require a bench of cleared CND analysts to support continuous monitoring, threat intelligence analysis, and incident response at Fort Meade. The current incumbent has documented analyst retention gaps — which means the winning offeror will be building a largely new team from cleared talent already in the market.

Day-to-day work centers on monitoring network sensor data, correlating threat indicators across classified and unclassified feeds, and producing finished intelligence products for CYBERCOM's senior leadership. The environment runs Splunk and Crowd Strike Falcon; MITRE ATT&CK framework fluency is expected, not optional. You're working alongside NSA and JFHQ-DODIN operators — institutional knowledge of how those organizations think is a differentiator.

The RFP is expected Q4 2026. Winning companies are actively building their proposed teams now — 3–6 months before the solicitation drops. A TS/SCI-cleared CND analyst who reaches out to Peraton, Leidos, or SAIC's CYBERCOM BD teams today is a warm lead, not a cold resume in a pile.

Some positions on this contract require TS/SCI with CI polygraph. If you hold an active CI poly, lead with that — it cuts months off a company's onboarding timeline and is the single biggest hiring differentiator at this classification level.

Bachelor's in Computer Science, Cybersecurity, or related field