> Markdown version of [/jobs/ext/737558-cybersecurity-operations-analyst-ii-r-00170](https://www.wearedevelopers.com/jobs/ext/737558-cybersecurity-operations-analyst-ii-r-00170). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cybersecurity Operations Analyst II (R-00170)

- **Company:** True Zero Technologies
- **Location:** Seaside, CA, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Data Loss, Network Architecture, Comptia Pentest+ CE, Security Software, Data Logging, Mitre Att&ck, SC Clearance, Information Technology, Cybercrime, Splunk
- **Published:** June 29, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=1c1dcda71a6674aa

## About the Role

Do you have experience in NIST standards?, Do you have a Bachelor's degree?, * Bachelor's degree in computer science or related field

 * U.S. Citizenship and an active Secret Clearance (required) with the ability to obtain and maintain a Top-Secret Clearance.
 * Active DoD 8570 IAT Level II certification or greater, including at least one of the following certifications in good standing: CCNA Security, CySA+, GICSP, GSEC, Security+ CE, CND, SSCP, CASP+CE, CCNP Security, CISSP (or Associate), GCED, GCIH, or CCSP.
 * Active DoD 8570 CSSP Incident Responder certification a plus, including at least one of the following certifications in good standing: CEH, CFR, CCNA Cyber Ops, CHFI, CySA+, GCFA, GCIH, SCYBER, or PenTest+
*

 + Knowledge of Incident Response Handling Procedures (NIST SP 800-61)
 + Familiarity with cyber adversary tactics and frameworks (such as ATT&CK and D3FEND)
 + Knowledge of one or more of the following cybersecurity tools:
+
o Trellix/ESS
o Tanium
o Microsoft Defender Endpoint
o BeyondTrust
o Splunk

 + Great communication skills and attention to detail., * 8+ years in Information Technology or Information Security with 5+ years performing Cybersecurity Operations and Incident Response

## Description

* Lead response activities for USCYBERCOM and DCDC directives, managing the lifecycle of
Situational Awareness Reports (SAR) and ensuring all assets remain compliant with OPORDs,
TASKORDs, IAVM notifications, and STIG requirements by published deadlines.

 * Conduct deep-dive forensic investigations into cybersecurity events (data loss, unauthorized
access, network exploits) to determine nature and scope; identify corrective actions for
containment, eradication, and recovery.

 * Perform thorough post-incident reviews to derive lessons learned, identify security gaps, and
implement preventive measures to strengthen the program's long-term defense posture.

 * Provide expert guidance on cybersecurity directives and risk management policies; review
POA&Ms for technical clarity and sound judgment to ensure acceptable remediation timeframes
for security controls.

 * Oversee enterprise-wide monitoring and logging across network infrastructure and endpoints to
ensure the rapid detection and response to cyber incidents.

 * Maintain and evolve IR SOPs in strict accordance with CJCSM 6510.01B, NIST SP 800-61R2,
and DOW regulations to ensure procedural alignment with industry best practices.

 * Translate technical findings into regular status reports for program leadership, DOW officials,
and USCYBERCOM /DCDC repositories, detailing incident impact, effectiveness of response
strategies, and lessons learned.

 * Drive the evolution of incident response capabilities by identifying weaknesses, recommending
advanced technologies, and implementing enhanced processes to stay ahead of evolving cyber
threats.

 * Support DOW CIO data collection by reviewing PPSM, CAP, SNAP, and GIAP requests against
DISA guidelines; cross-train team members on emerging defense techniques and provide after-
hours investigative support for critical incidents.


## Related Videos

- [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [How to Avoid LLM Pitfalls - Mete Atamel and Guillaume Laforge](https://www.wearedevelopers.com/videos/1328-how-to-avoid-llm-pitfalls-mete-atamel-and-guillaume-laforge)
- [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture)
- [Deep Fakes: The Lies We Can’t See](https://www.wearedevelopers.com/videos/1187-deep-fakes-the-lies-we-can-t-see)
- [From Shadow AI to Secure Intelligence: Safe AI Usage in the Enterprise](https://www.wearedevelopers.com/videos/2093-from-shadow-ai-to-secure-intelligence-safe-ai-usage-in-the-enterprise)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)