> Markdown version of [/jobs/ext/607588-soc-defensive-cyber-operations-dco-analyst-jr](https://www.wearedevelopers.com/jobs/ext/607588-soc-defensive-cyber-operations-dco-analyst-jr). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # SOC Defensive Cyber Operations (DCO) Analyst Jr. - **Company:** ITI - **Location:** Colorado Springs, CO, United States - **Experience:** Starter - **Salary:** $95,000.0 - $110,000.0 - **Contract:** Permanent contract - **Skills:** Bash Shell, CompTIA Security+, Cyber Security, Information Systems, Elasticsearch, Intrusion Detection and Prevention, Python (Programming Language), Microsoft Office, Comptia Pentest+ CE, Logstash, Security Information and Event Management, Tcpdump, Wireshark, Snort (Software), Cyber Threat Analysis, Firewalls (Computer Science), Information Technology, Kibana, Cyber Warfare, Splunk, Security Orchestration, Automation & Response, Vulnerability Analysis - **Published:** June 19, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=4ad90db3a87cebdd ## About the Role Do you have experience in Research?, Do you have a Bachelor's degree?, Required Qualifications: (Must have one of the Foundational Qualification Options below): Education: BS degree in Information Technology, Cybersecurity, Data Science, Information Systems, or Computer Science, from an ABET-accredited or CAE-designated institution, Certifications: CEH, GFACT, GISF, Cloud+, GCED, PenTest+, Security+, GSEC, CySA+, CBROPS, CFR, FITSP-O, GCIA, GDSA, GICSP, or GCFA, * Prior Defensive Cyber Operations or Cyber Analyst experience * Prior Cybersecurity Service Provider (CSSP)/SOC experience * Familiarity with Space Operations is highly desired. * 0-3 years of CSSP/SOC Cyber Analyst type work experience in a DoD cybersecurity environment Experience/Skills: Experience performing Cyber Threat Hunting, Participating in cyber exercises, Cyber Incident Response, Intrusion Detection, and Continuous Cybersecurity Monitoring Provide expertise for DCO-Space capabilities, to include Security Incident and Event Management (SIEM); Intrusion Detection and Prevention Systems; ELK (Elasticsearch, Logstash, and Kibana) Stack; Endpoint Protection Systems; Security Orchestration, Automation and Response (SOAR); Firewalls; Log Aggregator; Protocol Analyzers; Vulnerability Assessment Tools Hands-on experience with the following tools: Elastic Stack, Teleseer, Kibana, Suricata, Wireshark, Splunk, Snort, Carbon Black, Bro/Zeek logs, TCPdump, editcap, ACAS, Bash scripting, Python, or Microsoft Office 365 Clearance: Active TS/SCI clearance is required, Must be a United States Citizen and pass a background check ## Description ITI Solutions seeks a SOC DCO Cyber Analyst to support cyber operations at Schriever SFB. The candidate must be willing to work 12-hour shifts on a fixed 4-on, 3-off, and 3-on, 4-off schedule, either day or night shift., * Analyze cyber incidents, correlate incident details, and formulate response actions * Provide recommendations on tuning and maximizing the capability of existing tools while suggesting additional tools to enhance capability * Monitor government-provided Defensive Cyber Operations (DCO) tools and systems * Conduct after-action processes to capture efforts taken to mitigate unauthorized actions * Participate in the development of DCO Tactics, Techniques, and Procedures (TTPs) * Assist in the development of DCO concept of operations, processes, and procedures * Identify security discrepancies and report security incidents * Provide expert research and analysis in support of expanding programs and areas of responsibility ## Related Videos - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [Debug a Kubernetes Operator](https://www.wearedevelopers.com/videos/487-debug-a-kubernetes-operator) - [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Add Location-based Searching to Site with ElasticSearch](https://www.wearedevelopers.com/videos/77-add-location-based-searching-to-site-with-elasticsearch) - [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture) ## Related Articles - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Dev Digest 216: CyberSec + Mythos, Stack Overflow for Agents & DOOM in TTF](https://www.wearedevelopers.com/magazine/728-dev-digest-216-cybersec-mythos-stack-overflow-for-agents-doom-in-ttf) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this) - [Best Coding Boot Camps in Germany](https://www.wearedevelopers.com/magazine/237-best-coding-boot-camps-in-germany)