Cyber Security Analyst

Job#: 3012002

Job Description:
Cybersecurity Analyst - Operations Watch Analyst (Tier 1-3), Active Secret Security Clearance required

Clearance Requirements: Active Secret Security Clearance required; must be eligible for and able to obtain a Top Secret Clearance.

Position Overview

The Operations Watch Analyst serves as a critical member of the Cybersecurity Operations team, responsible for identifying, investigating, reporting, and mitigating cyber incidents across diverse network environments.

This role ensures timely detection, analysis, and response to security events in accordance with Chairman of the Joint Chiefs of Staff Manual (CJCSM) 6510.01B and other applicable Department of Defense (DoD) directives. The analyst will assess the severity of incidents, document findings, and coordinate appropriate response actions with stakeholders across the DoD Information Network (DoDIN).
Key Responsibilities

Maintain a thorough working knowledge of CJCSM 6510.01B and ensure compliance with related policies and procedures.

Develop, maintain, and continuously improve Standard Operating Procedures (SOPs) for operational watch functions.

Conduct proactive network intrusion detection, monitoring, correlation, and analysis to identify potential threats.

Validate and assess suspicious events to determine if they meet incident criteria, ensuring accurate and timely entry into designated reporting systems.

Coordinate with Joint Force Headquarters-DoDIN (JFHQ-DoDIN) and supported organizations to ensure appropriate analysis, reporting, and escalation of significant incidents.

Provide 24/7 incident response coverage, including after-hours and surge support as mission needs dictate.

Perform network and host-based digital forensics across Microsoft Windows and other operating systems to support incident analysis and remediation.

Analyze full packet captures (PCAP) using tools such as Wireshark and other network forensic utilities.

Correlate system and network activity using Splunk and other log aggregation tools to detect anomalies and potential intrusions.

Develop, tune, and implement Intrusion Detection/Prevention System (IDS/IPS) signatures to enhance detection accuracy and minimize false positives.

Participate in program reviews, product assessments, and on-site certification evaluations to strengthen cyber defense posture.

Support a rotating shift schedule (4x10-hour workdays), including at least one weekend day.

Work collaboratively in a high-tempo, mission-focused environment requiring flexibility and occasional overtime for surge operations.
Minimum Qualifications

U.S. Citizenship required.

Bachelor's degree in Cybersecurity, Information Technology, or a related field; or a minimum of three years of directly relevant experience, preferably within a DoD or federal cybersecurity environment.

Willingness to travel up to 15% globally, including short-notice (72-hour) deployments in support of incident response operations.
Preferred Qualifications

Five or more years of cybersecurity incident response experience.

Strong knowledge of incident response procedures, packet analysis, IDS/IPS technologies, and host-based security tools.

Proficiency in log correlation and analysis using tools such as Splunk, Elastic, or equivalent platforms.

Familiarity with digital forensics tools and methodologies.

Demonstrated ability to analyze complex issues, think critically, and operate independently under pressure.

Excellent written and verbal communication skills to support operational reporting and coordination.
Highly Desired

In-depth understanding of CJCSM 6510.01B reporting requirements.

Prior experience in DoD environments.

Experience conducting digital forensics and malware analysis.
Required Certification(s)

Must hold an IAT Level II (Tier 1 and 2) or IAT Level III (Tier 3) certification (per DoD 8570.01-M) and PWS certification requirements in accordance with DoD cybersecurity workforce requirements.

Apex Systems is a world-class IT services company that serves thousands of clients across the globe. When you join Apex, you become part of a team that values innovation, collaboration, and continuous learning. We offer quality career resources, training, certifications, development opportunities, and a comprehensive benefits package. Our commitment to excellence is reflected in many awards, including ClearlyRated's Best of Staffing in Talent Satisfaction in the United States and Great Place to Work in the United Kingdom and Mexico. Apex uses a virtual recruiter as part of the application process. Click for more details.

Apex Benefits Overview: Apex offers a range of supplemental benefits, including medical, dental, vision, life, disability, and other insurance plans that offer an optional layer of financial protection. We offer an ESPP (employee stock purchase program) and a 401K program which allows you to contribute typically within 30 days of starting, with a company match after 12 months of tenure. Apex also offers a HSA (Health Savings Account on the HDHP plan), a SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions, a corporate discount savings program and other discounts. In terms of professional development, Apex hosts an on-demand training program, provides access to certification prep and a library of technical and leadership courses/books/seminars once you have 6+ months of tenure, and certification discounts and other perks to associations that include CompTIA and IIBA. Apex has a dedicated customer service team for our Consultants that can address questions around benefits and other resources, as well as a certified Career Coach. You can access a full list of our benefits, programs, support teams and resources within our 'Welcome Packet' as well, which an Apex team member can provide.