Cyber Operations Center (CyOC) Action Officer

The CyOC Action Officer will support the mission-critical efforts of the Defense Health Agency (DHA) by enabling proactive cybersecurity operations that protect sensitive healthcare systems across the Department of Defense (DoD). This role is embedded within the Naval Information Warfare Center (NIWC) Atlantic's Defensive Cyberspace Operations (DCO) Integrated Product Team (IPT), which is tasked with safeguarding DHA’s global infrastructure against cyber threats, unauthorized access, and emerging vulnerabilities.

What You Will Do

The Action Officer will receive, assess, and triage incoming Requests for Information (RFIs) from DHA subscribers, conduct detailed research and threat analysis on cyber incidents, indicators, and adversary activity, and develop and deliver concise, accurate, and actionable intelligence reports tailored to subscriber needs.

Why It Might Be a Fit

This position requires a Top Secret/SCI clearance, strong knowledge of DoD cyber policy, and a proven ability to analyze and communicate complex threat intelligence. Candidates will be part of a dynamic, fast-paced environment where analytical precision, rapid response, and interagency collaboration are essential to mission success.

Requirements

• Top Secret/SCI clearance
• 5+ years of experience in cybersecurity, threat intelligence analysis, or related cyber defense roles supporting DoD or federal agencies
• Strong understanding of DoD cybersecurity policies, including DoD 8500-series, DoDI 8510.01 (RMF), and CJCSM 6510.01 (Cyber Incident Handling)
• Proficiency in analyzing cyber threats across the MITRE ATT&CK framework, including TTPs and IOCs
• Experience with threat intelligence platforms (TIPs), SIEM tools (e.g., Splunk, ELK, QRadar), and open-source intelligence (OSINT) research tools
• Familiarity with malware analysis, DDoS patterns, phishing campaign forensics, and adversarial behavior
• Strong written and verbal communication skills, including the ability to draft and present technical intelligence reports to varied audience
• Ability to manage and prioritize multiple concurrent RFIs in a high-tempo operations environment
• Working knowledge of network architecture and protocols, including TCP/IP, DNS, HTTP/S, SMTP, and common intrusion methods
• Hands-on experience with collaboration and tracking tools such as JIRA, Confluence, MS Teams, and SharePoint
• Demonstrated ability to work collaboratively in a cross-functional environment under minimal supervision

Benefits

• Voluntary Medical, Dental, Vision, with Health Savings or Flexible Spending Plan options
• Voluntary Life, Critical Illness, Accident, and Long Term Care insurance options
• Group Term Life, Short-Term and Long-Term Disability is provided by Sentar to all qualifying employees
• Generous 401(k) match
• Competitive PTO plan that graduates quickly with years of service
• Other leave programs; holiday schedule along with bereavement, maternity, jury and military duty
• Mental health awareness programs
• Tuition reimbursement
• Professional development reimbursement
• Recognition and Awards programs