Watch Analyst / Active Top Secret

Peraton Overview

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can’t be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we’re keeping people around the world safe and secure.

Responsibilities

Peraton is seeking a Watch Analyst to support its Federal Strategic Cyber team in Washington, DC.

• Location: Washington, DC | On-site
• Work Schedule: 24/7/365 Operations Center | Shift Work

Position Overview: 

This position supports the Department of Homeland Security (DHS), Cybersecurity and Infrastructure Security Agency (CISA), within a 24/7 classified Operations and Watch Center.

The Operations Center serves as a central hub for monitoring, assessing, and coordinating responses to emerging cyber, physical, and infrastructure threats impacting national security. The team provides critical situational awareness and actionable intelligence to federal leadership, law enforcement, and government stakeholders to help protect the nation's critical infrastructure.

Key Responsibilities

• Threat Monitoring: Monitor classified databases, incident management systems, alerting services, news outlets, social media, and other open-source intelligence for emerging threats and incidents affecting critical infrastructure and national security.

• Incident Triage and Analysis: Conduct initial assessments of cyber, physical, and communications incidents to determine severity, potential impact, and appropriate reporting or escalation requirements.

• Situational Awareness and Reporting: Analyze and synthesize information to produce accurate, timely, and actionable reports and briefings for government leadership, law enforcement, and federal stakeholders.

• Incident Coordination: Collaborate with team members and government partners to track, coordinate, and document incidents through resolution.

• Operational Support: Work in a fast-paced, time-sensitive environment under the direction of a federal CISA Duty Officer, exercising sound judgment, critical thinking, and effective decision-making.

• Security and Confidentiality: Maintain strict adherence to classified information handling procedures, operational security protocols, and confidentiality requirements.

• Systems and Technical Support: Operate and maintain familiarity with communications and information technology systems used in daily operations. Identify and troubleshoot technical issues and coordinate resolution with appropriate support teams.

• Team Collaboration: Support continuous watch operations, maintain operational awareness, and ensure effective communication and continuity across shifts.

• Additional Duties: Perform other operational support activities as directed by the government customer.

Work Environment and Schedule:

• Position is 100% on-site in Washington, DC, within a classified Operations and Watch Center.

• Operations run 24 hours a day, 7 days a week, 365 days a year, including weekends and holidays.

• Shift assignments are based on operational requirements and may include rotating schedules.

• Candidates must be comfortable working in a high-tempo, mission-critical environment requiring attention to detail, sound judgment, and timely reporting.

Current Shifts Are: 

• Shift 1: 0530-1530
  • Team A: Monday through Thursday
  • Team B: Tuesday through Friday
• Shift 2: Monday-Friday from 1500-2300
• Shift 3: Monday-Friday from 2200-0600
• Shift 4: Saturday/Sunday from 0530-1800, Monday and Friday from 0530-1530
• Shift 5: Saturday/Sunday from 1730-0600 and two weekday overnight shifts 

Ideal Candidate:

The ideal candidate brings experience in operations, intelligence analysis, cybersecurity, incident monitoring, or critical infrastructure protection, along with strong analytical, research, communication, and report-writing skills.

Successful candidates will demonstrate the ability to assess evolving situations, prioritize competing demands, communicate effectively, and support informed decision-making in a dynamic federal operations environment.

Qualifications

Basic Qualifications:

• Bachelor’s degree and 2 years of relevant experience.
  • An additional 4 years of experience may be substituted in lieu of a bachelor's degree.
• Demonstrated excellent written and verbal communication skills.
• Must have broad capabilities and expertise in research, analysis, and report writing skills. 
• Must be flexible and able to work within a 24x7x365 operations support environment. 
• Experience with open-source analysis and alerting systems.
• Knowledge of Microsoft Office automation solutions.
• Must have experience/expertise in one or more critical infrastructure sectors (as defined by HSPD-7 and the NIPP), cyber and/or emergency management. 
• Must have Knowledge of National Incident Management System (NIMS) structure, emergency management operations, and background knowledge of one (1) or more critical infrastructure sectors.
• Must complete FEMA IS-100.c, IS-453, IS-520, IS-545.a, IS-551, IS-700.b, IS-800.d, IS-860.c and IS-1300 before first day on the contract.
• U.S. citizenship is required.
• An active Top Secret security clearance required with ability to obtain SCI.
  • In addition, selected candidate must be able to obtain and maintain a favorably adjudicated DHS background investigation for continued employment. 

Preferred Qualifications:

• Specialized operations center experience.
• Experience in drafting and publishing national level reporting.
• Experience with email triage and requests for information (RFIs).
• Experience as an All-Source Intelligence Analyst in Joint Operations Center and/or Fusion Center.
• Experience with cyber incident management and analysis.
• Obtained Cyber certifications (i.e., CompTIA Security+)
• Experience with Knowledge Management Systems and ServiceNow.
• Has the ability to read technical cyber reporting, including IOCs and TTPs, and be able to extract the important information to provide clear and concise reporting for a non-technical audience. 

Target Salary Range

$80,000 - $128,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.
Benefits Statement

Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed at https://www.careers.peraton.com/benefits.

Application Statements


EEO

EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.