> Markdown version of [/jobs/ext/2559551-defensive-cyber-operations-watch-stander-information-security-analyst](https://www.wearedevelopers.com/jobs/ext/2559551-defensive-cyber-operations-watch-stander-information-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Defensive Cyber Operations Watch Stander / Information Security Analyst

- **Company:** Knexus Research LLC
- **Location:** Colorado Springs, CO, United States
- **Salary:** $65,000.0 - $68,000.0
- **Contract:** Permanent contract
- **Skills:** Data Analysis, CompTIA Security+, Cyber Security, Intelligence Analysis, Machine Learning, Computer Network Operations, Cybercrime, Cyber Warfare
- **Published:** August 5, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=be561c39f676d7bc

## About the Role

* Active/current Top Secret clearance with SCI eligibility
 * Current CompTIA Security+ certification
 * Must be a U.S. citizen
 * Experience supporting Cyber Operations Centers, Security Operations Centers (SOC), Network Operations Centers (NOC), or military watch floor operations.
 * Experience analyzing cybersecurity events, vulnerabilities, incidents, and operational impacts.
 * Knowledge of cyber threat intelligence, defensive cyber operations, and incident response.
 * Experience preparing technical reports, operational briefings, and executive-level products.
 * Strong analytical, critical thinking, and written communication skills.
 * Ability to work effectively in a fast-paced operational environment supporting national security missions., * Experience supporting Combatant Commands or Department of War cyber operations.
 * Familiarity with USCYBERCOM, JFHQ-DoDIN, DISA, NSA, or CISA operations.
 * Experience with cyber threat intelligence analysis and mission assurance.
 * Experience participating in military exercises, cyber planning events, or contingency operations.
 * Knowledge of DoD cyber policies, CTASKORDs, OPORDs, WARNORDs, IAVAs, and cyber reporting processes.

## Description

S4 LLC (a wholly owned subsidiary of Knexus Research LLC) is seeking a Cyber Operations Watch Stander to support the NORAD and USNORTHCOM Cyberspace Operations Directorate under the Enterprise Machine Learning Analytics and Persistent Services 2 (eMAPS2) program. This position provides 24/7 on-site analysis for real world cyberspace threats to cyber terrain and characterizes the threats and mission impact of cyberspace vulnerabilities to operations by monitoring cyber threats, assessing mission impacts, analyzing vulnerabilities, and delivering timely operational reporting that enables informed command decisions. Supports a 24/7 mission environment and requires rotating shifts, nights, weekends, holidays, or extended operational support during contingencies and exercises., * Monitor and analyze cyber threats affecting USNORTHCOM systems in a 24/7 operational environment.

 * Assess cyber incidents, vulnerabilities, and mission impacts, and recommend defensive courses of action.
 * Produce threat assessments, operational reports, executive briefings, and cyber situational awareness products.
 * Monitor cyber taskings, advisories, vulnerability alerts, and incident reporting to support mission readiness.
 * Develop and maintain operational procedures, watch checklists, Tactics, Techniques, and Procedures (TTPs), and cyber playbooks.
 * Participate in cyber exercises, incident response activities, technical exchanges, and after-action reviews.
 * Collaborate with Government stakeholders and mission partners to enhance cyber readiness and operational awareness.
 * Research emerging cyber threats and provide recommendations to strengthen the Government's cyber posture.


## Related Videos

- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime)
- [Data Science in Retail](https://www.wearedevelopers.com/videos/586-data-science-in-retail)
- [Deep Fakes: The Lies We Can’t See](https://www.wearedevelopers.com/videos/1187-deep-fakes-the-lies-we-can-t-see)
- [Data Science on Software Data](https://www.wearedevelopers.com/videos/162-data-science-on-software-data)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)