Cybersecurity Operations Analyst (SOC)

About the role

JCS Solutions LLC (JCS) is seeking a Cybersecurity Operations Analyst to support the Security Operations Center (SOC). The role has a direct impact on maintaining and improving the security posture of a primary IT and cyber security service provider. An active DoD TS/SCI clearance is required.

Schedule

Day shift: Tuesday through Saturday, 6 am – 2 pm.

Responsibilities

• Utilize alerts from endpoints, IDS/IPS, netflow, and custom sensors to identify compromises on customer networks/endpoints.
• Perform junior‑ to intermediate‑level review of massive log files, pivot between data sets, and correlate evidence for incident investigations.
• Pass triaged alerts to senior‑level SOC personnel and assist in identifying malicious actors on customer networks.
• Document analysis, findings, and actions in a case/knowledge management system.
• Support senior‑level SOC personnel with the creation and distribution of incident reports to customers and higher headquarters.

Requirements

• Active DoD TS/SCI clearance.
• Bachelor’s degree and 10+ years of relevant experience, or equivalent combination of experience and cyber courses/certifications.
• 10+ years of incident handling/response experience.
• Experience working in a SOC environment.
• CND experience (Protect, Detect, Respond and Sustain) within a Computer Incident Response organization.
• Understanding of network threat life cycle, attack vectors, intrusion set TTPs.
• Strong knowledge of TCP/IP, networking ports and protocols, traffic flow, OSI model, defense‑in‑depth, and common security elements.
• DoD 8570 IAT Level II or higher certification (e.g., CompTIA Security+ CE, ISC2 SSCP, SANS GSEC) prior to starting.
• DoD 8570 CSSP‑A level certification (e.g., CEH, CySA+, GCIA) required within 6 months of start.
• Motivated self‑starter with strong written and verbal communication skills; ability to create complex technical reports.
• Strong analytical and troubleshooting skills.
• Willingness to perform shift work, including weekend hours.

Additional qualifications

• Hands‑on experience analyzing high volumes of logs, network data (NetFlow, Full Packet Capture), and other attack artifacts.
• In‑depth knowledge of architecture, engineering, and operations of at least one enterprise SIEM platform (e.g., ArcSight, Splunk, QRadar, etc.).
• Experience with anti‑virus, HIPS/HBSS, IDS/IPS, Full Packet Capture, network forensics.
• Familiarity with malware analysis concepts and methods.
• Unix/Linux command‑line experience.
• Scripting and programming experience.
• Knowledge of Intelligence‑Driven Defense, Cyber Kill Chain, and/or MITRE ATT&CK framework.

Benefits

• Health, dental, and vision insurance
• Life insurance
• Short‑ and long‑term disability
• Paid time off (PTO)
• 401(k) retirement plan with employer match
• Annual Professional Development Reimbursement Program
• Other benefits

Pay

Salary range: $105,000.00 – $150,000.00 (based on location, qualifications, and contract terms).