> Markdown version of [/jobs/ext/4269110-cybersecurity-operations-center-analyst](https://www.wearedevelopers.com/jobs/ext/4269110-cybersecurity-operations-center-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cybersecurity Operations Center Analyst

- **Company:** GovCIO
- **Location:** Colorado Springs, CO, United States
- **Salary:** $125,000 - $168,000
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Intrusion Detection and Prevention, Intrusion Detection Systems, Network Security, Log Analysis, Security Information and Event Management, Transmission Control Protocol (TCP), Software Vulnerability Management, QRadar, Cybercrime, Splunk
- **Published:** October 19, 2026
- **Apply:** https://find.jobs/jobs-near-me/apply/ats-redirect/?id=3027654468-2

## About the Role

* Security operations monitoring
 * SIEM tools (e.g., Splunk, QRadar)
 * Intrusion detection and prevention (IDS/IPS)
 * Incident response and containment
 * Threat hunting and analysis
 * Network security and TCP/IPEndpoint detection and response (EDR)
 * Vulnerability management
 * Log analysis and correlation
 * Security documentation and reporting

## Description

GovCIO is seeking a CSOC Classified Support Engineer to support federal cyber defense missions. In this role, you will monitor classified networks, analyze security alerts, investigate potential intrusions, and coordinate rapid incident response within a 24x7 Cyber Security Operations Center. You'll tune SIEM and security tools, create playbooks, document findings, and collaborate with engineers and analysts to strengthen defenses. Working in a mission-driven, fast-paced environment, you'll leverage modern security technologies while growing your skills through training, mentorship, and impactful national security projects., * Monitor classified networks and systems for security events and anomalies in a 24x7 CSOC environment.

 * Analyze and triage security alerts, identifying true positives and prioritizing incidents by impact and risk.
 * Execute incident response activities, including containment, eradication, and recovery, following established playbooks.
 * Configure, tune, and maintain SIEM and related security tools to improve detection quality and reduce noise.
 * Conduct threat hunting and log analysis to identify indicators of compromise and emerging attack patterns.
 * Collaborate with system and network engineers to remediate vulnerabilities and strengthen security controls.
 * Develop and maintain security documentation, incident reports, and standard operating procedures.
 * Support compliance with federal security policies and standards for classified environments.
 * Participate in on-call rotations and shift work as needed to support 24x7 operations.
 * Engage in continuous learning, training, and knowledge sharing to stay current on cyber threats and defense techniques.