incident handler security analyst 3rd shift

GovCIO

<div>Overview:
<div>
GovCIO is currently hiring for a 3rd shift (11pm - 7:30am) Incident Handler/Security Analyst to support the US Courts in Washington, DC (4 days onsite, Fridays remote).</div>
Responsibilities:
<div>
Correlates threat data from various sources to establish the identity and modus operandi of hackers active in client's networks and posing a potential threat. Provides the customer with assessments and reports facilitating situational awareness and understanding of current cyber threats and adversaries. Develops cyber threat profiles based on geographic region, country, group, or individual actors. Produces cyber threat assessments based on entity threat analysis. May provide computer forensic and intrusion support to high technology investigations in the form of computer evidence seizure, computer forensic analysis, data recovery, and network assessments. Researches and maintains proficiency in tools, techniques, countermeasures, and trends in computer network vulnerabilities, data hiding and network security and encryption.</div><ul><li>
Collaborates with intrusion analysts to identify, report on, and coordinate remediation of cyber threats to the client</li><li>
Provides timely and actionable sanitized intelligence to cyber incident response professionals</li><li>
Leverages technical knowledge of computer systems and networks with cyber threat information to assess the client's security posture</li><li>
Conducts intelligence analysis to assess intrusion signatures, tactics, techniques and procedures associated with preparation for and execution of cyber attacks</li><li>
Researches hackers, hacker techniques, vulnerabilities, exploits, and provides detailed briefings and intelligence reports to leadership</li></ul>
Qualifications:
<ul><li>Bachelors Degree with 5+ years of security analysis experience (or commensurate experience)</li><li>
Certification required: Splunk Fundamentals I &amp; II certification</li><li>
Clearance Required: Ablity to maintain a public trust clearance</li></ul><div>
Preferred</div><div></div><div><br>
Bachelor&rsquo;s Degree in Information Systems, Computer Science , Cybersecurity or related field</div>
Posted Salary Range: USD $81,850.00 - USD $110,000.00 /Yr.</div>

Incident Handler/Security Analyst - 3rd shift

<div>Overview:
<div>
GovCIO is currently hiring for a <b>3rd shift (11pm - 7:30am)</b> Master Level Cyber Defense Analyst/Intrusion Detection Team Shift Lead onsite in Washington, DC.</div>
Responsibilities:
<ul><li>Collaborates with intrusion analysts to identify, report on, and coordinate remediation of cyber threats to the client</li><li>
Provides timely and actionable sanitized intelligence to cyber incident response professionals</li><li>
Leverages technical knowledge of computer systems and networks with cyber threat information to assess the client's security posture</li><li>
Conducts intelligence analysis to assess intrusion signatures, tactics, techniques and procedures associated with preparation for and execution of cyber attacks</li><li>
Researches hackers, hacker techniques, vulnerabilities, exploits, and provides detailed briefings and intelligence reports to leadership</li></ul>
Qualifications:
<ul><li>Bachelor's with 8+ years of cyber security experience (or commensurate experience)</li><li>
7 years of security intrusion detection examination experience involving a range of security technologies that product logging data; to include wide area networks host and network IPS/IDS/HIPs traffic event review, server web log analysis, raw data logs</li><li>
Working experience of Splunk SIEM. Contractor will have at least two years as a cyber security or security operations shift team leader</li><li>
At least five years&rsquo; experience working at a senior level, performing analytics examination of logs and console events in the following working experience areas of; creating advance queries methods in Splunk or advance Grep skills, firewall ACL review, examining Snort based IDS events, Pcaps, web server log review, and working in a SIEM environment</li></ul><br>
<div></div>
Posted Salary Range: USD $108,310.00 - USD $150,000.00 /Yr.</div>

Intrusion Detection Team Lead - 3rd shift

Otoe Missouria Group

<div><h3 class="jobSectionHeader"><b>About Us</b></h3>
<p>Otoe Missouria Group (OMG) is a tribally owned business dedicated to delivering high-quality solutions across a range of industries. Our company supports federal, commercial, and tribal clients with expert program management, project oversight, and numerous other services.</p>
<h3 class="jobSectionHeader"><b>Position Summary</b></h3>
<p>OMG Federal is proactively identifying talented professionals who embody our entrepreneurial spirit and commitment to service. This position is not currently funded but is expected as part of upcoming program requirements. Candidates will be notified as funding and hiring timelines are confirmed. We encourage all qualified applicants to apply.</p>
<p>We are currently seeking a Senior Security Operations Analyst to support cybersecurity operations within a federal environment in Washington, DC. This role is focused on continuous monitoring, alert triage, and incident response execution to protect mission-critical systems. The ideal candidate brings strong analytical capabilities, hands-on SOC experience, and familiarity with federal cybersecurity practices.</p>
<h3 class="jobSectionHeader"><b>Key Responsibilities</b></h3>
<ul><li>Perform continuous monitoring of security events and alerts across enterprise systems</li>
<li>Analyze and triage alerts from SIEM and threat detection tools to determine severity and impact</li>
<li>Execute incident response procedures, including containment, eradication, and recovery actions</li>
<li>Conduct detailed log analysis to identify suspicious activity and indicators of compromise</li>
<li>Escalate and document security incidents in accordance with established procedures</li>
<li>Support development and refinement of detection rules, alerts, and use cases within SIEM platforms</li>
<li>Collaborate with cybersecurity engineers and leadership to strengthen defensive capabilities</li>
<li>Maintain accurate and detailed incident records, reports, and documentation</li>
<li>Ensure alignment with federal cybersecurity standards, policies, and best practices</li>
<li>Participate in shift-based operations as required to support 24/7 monitoring environments</li>
</ul>
<p><b>Minimum Qualifications</b></p>
<ul><li>A bachelor&rsquo;s degree in computer science or a closely related field is preferred; A high school diploma or equivalent is required.</li>
<li>Six plus (6+) years of experience in security operations, SOC analysis, or incident response in a federal agency is required</li>
<li>CompTIA Security+</li>
<li>CompTIA CySA+ (Cybersecurity Analyst Certification)</li>
<li>Hands-on experience with:
<ul><li>SIEM platforms and alerting systems</li>
<li>Log analysis across network, endpoint, and cloud environments</li>
<li>Threat detection and monitoring tools</li>
</ul></li><li>Demonstrated experience in:
<ul><li>Daily cyber monitoring and alert triage</li>
<li>Incident response execution within a structured environment</li>
<li>Supporting cybersecurity operations in a federal environment</li>
</ul></li><li>Strong understanding of cybersecurity principles, threat vectors, and attack methodologies</li>
<li>Ability to analyze complex data sets and respond to security incidents under pressure</li>
<li>Strong communication and documentation skills</li>
<li>An active Public Trust or had one in a recent position</li>
<li>Requires US Citizenship</li>
</ul>
<p><b>Preferred Qualifications</b></p>
<ul><li>Experience supporting federal compliance frameworks (e.g., NIST, FISMA)</li>
<li>Familiarity with ticketing systems and SOC workflows</li>
<li>Exposure to cloud security monitoring (e.g., Azure, AWS)</li>
<li>Experience in 24/7 Security Operations Center (SOC) environments</li>
</ul>
<p><b>Work Environment &amp; Schedule</b></p>
<ul><li>Full-time, on-site role based in Washington DC.</li>
<li>Travel may be required based on project and stakeholder needs.</li>
</ul>
<p><b>Why OMG Federal</b></p>
<p>OMG Federal partners with government agencies to deliver mission-focused solutions across cybersecurity, IT modernization, and operational support. Our team operates at the intersection of innovation and national security, providing professionals the opportunity to work on impactful programs in a collaborative and growth-oriented environment.</p>
<p><b>Equal Employment Opportunity (EEO) Statement</b></p>
<p>Otoe-Missouria Group, LLC (OMG) is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, gender identity, and sexual orientation), national origin, age, disability, genetic information, protected veteran status, or any other characteristic protected under federal, state, or local law. We are committed to fostering an inclusive and diverse workplace.</p></div>

Senior Security Operations Analyst

OCT Consulting LLC

<div>
 <strong>
  Senior Security Operations Analyst
  <br/>
  <br/>
 </strong>
 OCT Consulting is a business management and technology consulting firm that supports Federal Government clients. We provide consulting services in the areas of Strategy, Process Improvement, Change Management, Program and Project Management, Acquisition/Procurement, and Information Technology.
 <br/>
 <br/>
 <strong>
  Responsibilities And Duties
  <br/>
  <br/>
 </strong>
 OCT currently has an opening for a Senior Security Operations Analyst to work with our federal client. The client requires a Senior Security Operations Analyst to support the agency's cybersecurity program at its Washington, DC headquarters. This position focuses on security monitoring, analysis, incident response, and continuous monitoring across the client's hybrid IT infrastructure.
 <br/>
 <br/>
 <strong>
  This position is contingent upon contract award.
  <br/>
  <br/>
 </strong>
 <strong>
  Day to day responsibilities include:
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Perform all security analysis activities according to established standards and best practices
  </li>
  <li>
   Maintain threat awareness and monitor information systems for exploits and suspicious activities; analyze aggregated logs and reports from security tools
  </li>
  <li>
   Develop and execute a daily security analysis and reporting checklist to ensure comprehensive coverage of security monitoring activities.
  </li>
  <li>
   Evaluate effectiveness of security analysis activities compared to best practices and recommend improvements.
  </li>
  <li>
   Adhere to continuous monitoring practices to evaluate effectiveness of implemented security controls and execute proactive threat hunting activities to ensure confidentiality, integrity, and availability of information systems.
  </li>
  <li>
   Develop detection and response configuration policies to increase automation and alerting
  </li>
  <li>
   Develop incident handling procedures and execute incident response activities including all associated actions according to the incident response plan.
  </li>
  <li>
   Validate that sufficient and relevant information is captured and retained from security tools to support actionable security awareness and incident investigations.
  </li>
  <li>
   Collect security operations performance and security posture management metrics and prepare threat reports to inform risk management decisions.
  </li>
  <li>
   Support the development and maintenance of security operations documentation and standard operating procedures.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Requirements
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Must be a U.S. Citizen.
  </li>
  <li>
   Minimum six (6) continuous years of experience in security operations analysis in a federal government environment
  </li>
  <li>
   Demonstrated experience with security log analysis, threat detection, and incident response in a SOC or similar operational security environment.
  </li>
  <li>
   Hands-on experience with SIEM platforms, EDR/NDR tools, and security monitoring technologies
  </li>
  <li>
   Strong knowledge of NIST guidelines, FISMA requirements, and federal cybersecurity frameworks.
  </li>
  <li>
   Experience developing and executing security checklists, SOPs, and incident handling procedures.
  </li>
  <li>
   Familiarity with continuous monitoring practices, threat hunting, and security posture management
  </li>
  <li>
   Experience preparing security metrics, threat reports, and risk management briefings for senior leadership
  </li>
  <li>
   Security+, GCIA, GCIH, CYSA+, or equivalent security analyst certification required.
  </li>
  <li>
   Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field preferred; relevant IT certifications may be substituted for a formal degree.
  </li>
  <li>
   Ability to obtain and maintain a Public Trust clearance; background investigation will involve credit, fingerprint, and law enforcement agency checks.
  </li>
  <li>
   Must work primarily onsite in SW, Washington, DC 20024; limited remote work may be authorized
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Benefits
  <br/>
  <br/>
 </strong>
 OCT offers competitive compensation packages and a full suite of benefits which includes:
 <br/>
 <br/>
 <ul>
  <li>
   Medical, Dental, and Vision insurance
  </li>
  <li>
   Retirement savings 401K plan provided by an industry leading provider with 3% employer contributions of the employee's gross salary
  </li>
  <li>
   Paid Time Off and Standard Government Holidays
  </li>
  <li>
   Life Insurance, Short- and Long-Term disability benefits
  </li>
  <li>
   Training Benefits
   <br/>
   <br/>
  </li>
 </ul>
 Salary Range: $100,000 - $130,000 yearly commensurate with experience, education, etc.
 <br/>
 <br/>
 About OCT Consulting OCT Consulting LLC is a Small Business (SB) providing professional services and information technology solutions to the Federal government and commercial clients. Founded in 2013, we bring the agility of operations and a management team with a track record of leading successful engagements at major Federal government agencies.
 <br/>
 <br/>
 At OCT we believe in creating a work environment where employees can thrive based on their abilities, skills, and achievements. We are dedicated to providing career growth and professional development based on individual merit and fostering a workplace where everyone's contributions are valued and recognized.
</div>


Senior Security Operations Analyst (15.40)

NexThreat

<p>NexThreat is seeking a Senior Security Operations Analyst (Security Operations Analyst 3) to support contractor-led security operations activities with limited supervision from NIGC federal staff. This role is responsible for performing security monitoring, log analysis, threat awareness, detection/response tuning, continuous monitoring validation, incident response support, and security reporting aligned to established security standards and NIGC goals for protecting sensitive information.</p><p>Key Responsibilities:</p><p>The candidate will perform the following activities with minimal supervision and guidance:</p><p>Security Analysis &amp; Monitoring</p><ul><li>Perform security analysis activities according to established standards.</li><li>Maintain threat awareness and continuously monitor NIGC information systems for exploits and suspicious activities.</li><li>Analyze aggregated logs and reporting outputs from security tools (including Syslog and SIEM sources).</li><li>Execute security monitoring and analysis tasks in alignment with a daily operational cadence.</li></ul><p>Daily Reporting Checklist Execution</p><ul><li>Develop and maintain a daily security analysis and reporting checklist.</li><li>Execute checklist activities daily, ensuring timely detection, triage support, and reporting of security findings.</li></ul><p>Detection Engineering &amp; Automation Enablement</p><ul><li>Develop detection and response configuration policies to increase automation and improve alerting and detection quality.</li><li>Support the tuning and validation of detection logic across relevant controls (including EDR, NDR, firewalls, and cloud security tooling).</li></ul><p>Continuous Monitoring &amp; Threat Hunting</p><ul><li>Adhere to continuous monitoring practices to evaluate effectiveness of implemented security controls.</li><li>Execute proactive threat hunting activities to ensure confidentiality, integrity, and availability (CIA) of NIGC information systems.</li><li>Evaluate the effectiveness of security analysis activities against best practices and recommend improvements.</li></ul><p>Incident Handling &amp; Response Support</p><ul><li>Develop incident handling procedures aligned to NIGC processes and requirements.</li><li>Execute incident response activities and perform associated actions according to the NIGC incident response plan.</li><li>Validate that sufficient and relevant information is captured and retained from security tools to support actionable security awareness and incident investigations.</li></ul><p>Security Metrics &amp; Threat Reporting</p><ul><li>Collect security operations performance metrics and NIGC security posture management metrics.</li><li>Prepare NIGC threat reports that inform risk management decisions and support leadership situational awareness.</li></ul><p>Required Skill Areas / Technologies</p><p>The Senior Security Operations Analyst will support environments utilizing the following technologies and practices:</p><ul><li><b>Cisco Networking</b></li><li><b>Cisco Firewall</b></li><li><b>Microsoft Cloud Technologies</b> (IaaS, PaaS, SaaS)</li><li><b>Microsoft Identity Management:</b> <b>Microsoft Entra ID</b></li><li><b>Multi-Factor Authentication (MFA)</b></li><li><b>Mobile Device Management (iOS)</b></li><li><b>Linux Operating System Administration</b></li><li><b>Endpoint Detection and Response (EDR)</b></li><li><b>Network Detection and Response (NDR)</b></li><li><b>Patch Management</b></li><li><b>PowerShell</b></li><li><b>Log Management (Syslog)</b></li><li><b>Security Information and Event Management (SIEM)</b></li><li><b>Security Orchestration, Automation, and Response (SOAR)</b></li><li><b>Disaster Recovery (DR)</b> support</li></ul><p>Required Qualifications</p><ul><li>Senior-level experience performing security operations and security analysis in enterprise environments.</li><li>Demonstrated experience with SIEM and log management (including Syslog), and using aggregated security telemetry for investigation and reporting.</li><li>Demonstrated experience maintaining threat awareness, triaging suspicious activity, and supporting incident response.</li><li>Strong understanding of continuous monitoring practices and proactive threat hunting.</li><li>Experience developing and maintaining detection/response configuration policies and improving alerting quality through automation.</li><li>Experience reporting security posture and operational effectiveness using measurable metrics.</li><li>Working knowledge of Microsoft Entra ID and MFA, endpoint security tooling (EDR), and network security detection tooling (NDR).</li><li>Proficiency with Linux administration and scripting/automation using <b>PowerShell</b>.</li><li>Ability to execute security tasks with limited supervision and consistently follow established standards and operational procedures.</li></ul><p>Preferred Qualifications</p><ul><li>Experience supporting environments that integrate Cisco network/security controls with Microsoft cloud security services.</li><li>Experience supporting security orchestration/automation workflows (SOAR) to improve detection and response efficiency.</li><li>Experience validating DR readiness and supporting recovery-related security considerations.</li><li>Relevant cybersecurity certifications (e.g., Security+, CySA+, GIAC, Microsoft Security, or comparable credentials).</li></ul><p>Pay: $83,164.40 - $100,154.98 per year</p><p>Benefits:</p><ul><li>401(k)</li><li>Dental insurance</li></ul><p>Work Location: In person</p>

Security Operations Analyst 3, Senior

<div>Overview:
<div>
GovCIO is currently hiring for a <b>2nd shift (3pm - 11:30pm)</b> Master Level Cyber Defense Analyst/Intrusion Detection Team Shift Lead onsite in Washington, DC.</div>
Responsibilities:
<ul><li>Collaborates with intrusion analysts to identify, report on, and coordinate remediation of cyber threats to the client</li><li>
Provides timely and actionable sanitized intelligence to cyber incident response professionals</li><li>
Leverages technical knowledge of computer systems and networks with cyber threat information to assess the client's security posture</li><li>
Conducts intelligence analysis to assess intrusion signatures, tactics, techniques and procedures associated with preparation for and execution of cyber attacks</li><li>
Researches hackers, hacker techniques, vulnerabilities, exploits, and provides detailed briefings and intelligence reports to leadership</li></ul>
Qualifications:
<ul><li>Bachelor's with 8+ years of cyber security experience (or commensurate experience)</li><li>
7 years of security intrusion detection examination experience involving a range of security technologies that product logging data; to include wide area networks host and network IPS/IDS/HIPs traffic event review, server web log analysis, raw data logs</li><li>
Working experience of Splunk SIEM. Contractor will have at least two years as a cyber security or security operations shift team leader</li><li>
At least five years&rsquo; experience working at a senior level, performing analytics examination of logs and console events in the following working experience areas of; creating advance queries methods in Splunk or advance Grep skills, firewall ACL review, examining Snort based IDS events, Pcaps, web server log review, and working in a SIEM environment</li></ul><br>
<div></div>
Posted Salary Range: USD $108,310.00 - USD $150,000.00 /Yr.</div>

Intrusion Detection Team Lead - 2nd shift

Cape Fox Federal Integrators

<div>Job Description:<p><br>
Cape Fox Federal Integrators is seeking an experienced Information Security Analyst Subject Matter Expert (SME).</p>
<p><i>The salary range (or hiring range) for this position has been established at: $120,000.00 - $145,000.00</i></p>
<p><i>The above salary range represents the company&rsquo;s good faith and reasonable estimate of the range of possible compensation at the time of posting. In addition, for fulltime, benefit eligible positions we offer a variety of benefits including company holidays, paid time off, health insurance, dental insurance, vision insurance, life and disability insurance as well as 401K with company match.</i></p>
<p>Duties and responsibilities include:</p>
<ul><li>Perform all security analysis activities according to established standards.</li>
<li>Maintain threat awareness and monitor NIGC information systems for exploits and any suspicious activities; analyze aggregated logs and reports from security tools.</li>
<li>Develop a daily security analysis and reporting checklist and execute activities identified in the checklist.</li>
<li>Evaluate effectiveness of security analysis activities compared to best practices and recommend improvements.</li>
<li>Adhere to Continuous Monitoring practices to evaluate the effectiveness of implemented security controls and execute proactive threat hunting activities to ensure confidentiality, integrity, and availability of NIGC information systems.</li>
<li>Develop detection and response configuration policies to increase automation and alerting.</li>
<li>Develop Incident handling procedures.</li>
<li>Execute Incident Response activities to include all associated actions according to the NIGC incident response plan.</li>
<li>Validate that sufficient and relevant information is captured and retained from security tools to support actionable security awareness and incident investigations.</li>
<li>Collect security operations performance and NIGC security posture management metrics and prepare NIGC threat reports to inform risk management decisions.</li></ul><p><br>
</p><br>
<br>
<b>Job Requirements:</b><br>
<ul>
<li>Bachelor's Degree</li>
<li>Must complete applicable background investigations, obtain and maintain a Public Trust clearance, execute a Non-Disclosure Agreement (NDA), comply with all NIGC policies, and acknowledge and sign the NIGC Rules of Behavior.</li>
<li>CompTIA SEC+ certification desired</li>
<li>4+ years of related experience.</li>
<li>Authorization to work in the United States without sponsorship as defined by the Immigration Reform Act of 1986.</li>
</ul>
<p>#CJ</p><br>
<p></p>
<p>#CJ</p></div>

Information Security Analyst (SME)

Explore 363+ Incident handler security analyst 3rd shift in Washington this May. Find roles across top companies and apply now to boost your career.