Watch Analyst

Basic Qualifications:

• 4 years relevant experience with AS/AA; 2 years relevant experience with BS/BA; 8 years with no degree.
• At least one (1) year of specialized operations center experience.
• Active DoD Top Secret clearance with SCI eligibility.
• Active CompTIA Security+ certification.
• Strong desire to learn and work in a live Network Operations and Security environment.
• Experience with Knowledge Management Systems e.g. JIRA & Confluence.
• Willingness to work shifts to provide 24/7/365 operations support.
• Experience in Network Administration, Systems Administration and/or Network Security.
• Demonstrated excellent written and verbal communication skills.
• Must have broad expertise in research, analysis, and report writing skills.
• Must be flexible and able to work within 12 hours @ 5 days a week operations support environment.
• Experience with open-source analysis and alerting systems.
• Knowledge of Microsoft Office automation solutions.
• Must have experience/expertise in one or more critical infrastructure sectors (as defined by HSPD-7 and the NIPP), cyber and/or emergency management.
• Must have Knowledge of National Incident Management System (NIMS) structure, emergency management operations, and background knowledge of one (1) or more critical infrastructure sectors.
• U.S. citizenship is required.
• In addition, selected candidates must be able to obtain and maintain a favorably adjudicated DOW background investigation for continued employment.

• Experience in drafting and publishing national level reporting.
• Experience with email triage and requests for information (RFIs).
• Experience as an All-Source Intelligence Analyst in Joint Operations Center and/or Fusion Center.
• Experience with cyber incident management and analysis
• Has the ability to read technical cyber reporting, including IOCs and TTPs, and be able to extract important information to provide clear and concise reporting for a non-technical audience.

• The Watch Analyst will monitor classified databases, the ticket management system, subscription-based alerting services, cable and local news, social media, and other open sources for threats to the nation’s critical infrastructure and global operations impacting national security.
• The Watch Analyst should provide the initial triage and analysis of cyber, physical, and communication incidents to identify the severity of impact to critical infrastructure and determine the level of reporting or briefing required.
• The candidate will work with a small team to provide accurate, timely, and actionable reports to our government leadership, law enforcement, federal stakeholders, and partners. The team will coordinate incidents affecting critical infrastructure through incident completion.
• The candidate should be an experienced Operations/Intelligence/Cyber practitioner with the ability to work in a time-sensitive operational environment. Watch Analysts must maintain strict adherence to security protocols and confidentiality requirements in handling sensitive information.
• Watch Analysts must be able to multitask, make quick decisions, and utilize critical thinking skills in a time sensitive environment under the direction of a federal CISA Duty Officer.
• The candidate must be detail-oriented and have strong analytical skills with the ability to evaluate data, synthesize information, and write reports.
• The candidate is expected to understand the operation of all communications and information technology hardware and software utilized to perform daily functions. The candidate should have the ability to troubleshoot all equipment issues as needed and coordinate a resolution with the help desk.
• Other services and support as needed or directed by the government client.
• Shifts are assigned based on the needs of the team and may include rotating assignments.