> Markdown version of [/jobs/ext/2051846-defensive-cyber-operations-dco-analyst](https://www.wearedevelopers.com/jobs/ext/2051846-defensive-cyber-operations-dco-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Defensive Cyber Operations (DCO) Analyst

- **Company:** BreakPoint Labs
- **Location:** Honolulu, HI, United States
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Digital Forensics, Intrusion Detection Systems, Network Monitoring, Cybercrime, Cyber Warfare, Splunk
- **Published:** August 14, 2026
- **Apply:** https://www.clearancejobs.com/jobs/9018866/defensive-cyber-operations-dco-analyst

## About the Role

3+ years of experience working in CSSP, SOC, or similar environment, OR, Bachelor's degree in relevant technical field.

 - Must have DoD 8570 IAT Level II and CSSP-specific certifications.
 - Experience with Log Aggregation Tools (e.g., Splunk, Elastic, Sentinel) preferred.
 - Experience with IDS/IPS, host-based, and operating system logging solutions.
 - Knowledge of Incident Response methodologies and procedures strongly preferred.
 - Experience with digital forensics, threat hunting, and/or incident response desired.
 - Familiarity with CJCSM 6510.01B.
 - Analytical ability and strong verbal and written communication skills required.

Certifications Required: DoD 8570 IAT Level II and CSSP-specific certifications, CND and 8140.

Clearance Required: DoD Secret

Education Level required: Bachelor's Degree Area(s) of Study Relevant technical discipline OR 3+ years equivalent experience

## Description

BreakPoint Labs seeks a Defensive Cyber Operations (DCO) Analyst to be responsible for the continuous monitoring and initial triage of security events within a Cybersecurity Service Provider (CSSP) environment. Work takes place on four ten-hour shifts (Sunday-Wednesday or Wednesday - Saturday)., Monitor network and host-based systems.

 - Identify and validate of suspicious activities.
 - Escalate security incidents as required.
 - Provide support for foundational incident response procedures.
 - Comply with established reporting requirements with accuracy and timelines.
 - Assist in managing incident response by documenting and tracking details.
 - Participate in training to develop familiarity with tools and processes.
 - Support log correlation tasks using tools like Splunk, Elastic, and Sentinel.
 - Assist in program reviews and product evaluations as directed
 - Surge support may be required to support incident response actions.


## Related Videos

- [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime)
- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture)
- [Deep Fakes: The Lies We Can’t See](https://www.wearedevelopers.com/videos/1187-deep-fakes-the-lies-we-can-t-see)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Dev Digest 216: CyberSec + Mythos, Stack Overflow for Agents & DOOM in TTF](https://www.wearedevelopers.com/magazine/728-dev-digest-216-cybersec-mythos-stack-overflow-for-agents-doom-in-ttf)
- [Dev Digest 162: AI careers, MCP, AWS best practices & floppy sweaters](https://www.wearedevelopers.com/magazine/571-dev-digest-162-ai-careers-mcp-aws-best-practices-floppy-sweaters)
- [Dev Digest 152: Chrome Extensions Hack, CSS Spy Sheets, Deepseek OSS AI](https://www.wearedevelopers.com/magazine/540-dev-digest-152-chrome-extensions-hack-css-spy-sheets-deepseek-oss-ai)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)