Cybersecurity Operations Analyst
About the job
- Bachelor’s degree in computer science or related field
- U.S. Citizenship and an active Secret Clearance (required) with the ability to obtain and maintain a Top-Secret Clearance.
- Active DoD 8570 IAT Level II certification or greater, including at least one of the following certifications in good standing: CCNA Security, CySA+, GICSP, GSEC, Security+ CE, CND, SSCP, CASP+CE, CCNP Security, CISSP (or Associate), GCED, GCIH, or CCSP.
- Active DoD 8570 CSSP Incident Responder certification a plus, including at least one of the following certifications in good standing: CEH, CFR, CCNA Cyber Ops, CHFI, CySA+, GCFA, GCIH, SCYBER, or PenTest+
- Knowledge of Incident Response Handling Procedures (NIST SP 800-61)
- Familiarity with cyber adversary tactics and frameworks (such as ATT&CK and D3FEND)
- Knowledge of one or more of the following cybersecurity tools: Trellix/ESS, Tanium, Microsoft Defender Endpoint, BeyondTrust, Splunk
- Great communication skills and attention to detail.
- 8+ years in Information Technology or Information Security with 5+ years performing Cybersecurity Operations and Incident Response
- Required to work onsite daily at our DoD customer office location in Alexandria, VA or Seaside, California.
- Oversee enterprise-wide monitoring and logging across network infrastructure and endpoints to ensure the rapid detection and response to cyber incidents.
- Maintain and evolve IR SOPs in strict accordance with CJCSM 6510.01B, NIST SP800-61R2, and DOW regulations to ensure procedural alignment with industry best practices.
- Translate technical findings into regular status reports for program leadership, DOW officials, and USCYBERCOM /DCDC repositories, detailing incident impact, effectiveness of response strategies, and lessons learned.
- Drive the evolution of incident response capabilities by identifying weaknesses, recommending advanced technologies, and implementing enhanced processes to stay ahead of evolving cyber threat
- Support DOW CIO data collection by reviewing PPSM, CAP, SNAP, and GIAP requests against DISA guidelines; cross-train team members on emerging defense techniques and provide after-hours investigative support for critical incidents.
- Perform thorough post-incident reviews to derive lessons learned, identify security gaps, and implement preventive measures to strengthen the program’s long-term defense posture.
- Provide expert guidance on cybersecurity directives and risk management policies; review POA&Ms for technical clarity and sound judgment to ensure acceptable remediation timeframes for security controls.
- Conduct deep-dive forensic investigations into cybersecurity events (data loss, unauthorized access, network exploits) to determine nature and scope; identify corrective actions for containment, eradication, and recovery.
- Lead response activities for USCYBERCOM and DCDC directives, managing the lifecycle of Situational Awareness Reports (SAR) and ensuring all assets remain compliant with OPORDs, TASKORDs, IAVM notifications, and STIG requirements by published deadlines.
- Active DoD 8570 CSSP Incident Responder certification a plus, including at least one of the following certifications in good standing: CEH, CFR, CCNA Cyber Ops, CHFI, CySA+, GCFA, GCIH, SCYBER, or PenTest+
About the company
True Zero Technologies provides security and technology management services by implementing Splunk-based data analytics for organizations in sectors like healthcare, finance, and government. These solutions work by collecting and analyzing large amounts of machine data to help clients monitor their IT systems and detect cybersecurity threats in real-time. As a veteran-owned business, the company differentiates itself by using a team of seasoned industry experts to deliver repeatable, standardized service models rather than one-off custom fixes. Their goal is to ensure long-term customer success through managed services while actively supporting the veteran community through educational scholarships.
Company Size
11-50
Company Stage
N/A
Total Funding
N/A
Headquarters
Fair Oaks, Virginia
Founded
2016
Get referred to True Zero Technologies
See people who can refer or advise you
Simplify's Take
What believers are saying
- NASA SEWP VI opens three service categories across federal buyers starting July 2026.
- Montana agencies gained a ready procurement path through July 2026 master-contract inclusion.
- Inc. named True Zero a 2026 Best Workplace, helping recruiting in Fairfax.
What critics are saying
- DARPA MANNUS is shared across nine awardees, so task-order revenue stays fragmented.
- Its public story leans heavily on federal vehicles; one procurement loss hits growth immediately.
- Printer-support scope at DARPA narrows differentiation; larger integrators can commoditize the work.
What makes True Zero Technologies unique
- Veteran-owned Fairfax firm built around Splunk-based security and mission-critical technology services.
- Won NASA SEWP VI, DARPA MANNUS, and Montana master-contract access in 2026.
- Ryan Brewer joined September 2026 to scale federal growth, alliances, and executive relationships.
Help us improve and share your feedback! Did you find this helpful?
Benefits
Health Insurance
Paid Vacation
Paid Holidays
401(k) Retirement Plan
401(k) Company Match
Phone/Internet Stipend
Parental Leave
Company News
True Zero Technologies names Ryan Brewer VP of strategic growth. by Miles Jamison September 8, 2026, 11:11 am * Ryan Brewer has joined True Zero Technologies to help develop the company's growth strategy * As VP of strategic growth, he will develop multiyear strategies for priority federal accounts * Brewer will also build strategic alliances and enhance executive engagement True Zero Technologies has appointed cybersecurity executive Ryan Brewer as vice president of strategic growth, the company announced on LinkedIn Saturday. Who is Ryan Brewer? Brewer has more than 25 years of experience as a cybersecurity and business development executive in the federal sector, with a background spanning government, consulting, entrepreneurship and executive leadership. His career includes federal acquisition work such as capture and proposal development, along with experience founding and growing cybersecurity companies. What is his role at True Zero Technologies? As VP of strategic growth, Brewer will work on corporate strategy, market positioning, partnerships and the company's long-term growth direction. He will be part of the executive leadership team, with responsibilities spanning market expansion and operational maturity. His work will include setting multiyear strategies for priority federal accounts and assessing technical differentiators and investment needs. The appointment comes as True Zero builds on recent federal contracting wins, including a spot on NASA's Solutions for Enterprise-Wide Procurement VI governmentwide acquisition contract and a position on the Defense Advanced Research Projects Agency's Managed Enterprise Network Support Services, or MANNUS, contract. He will also engage with executives, develop strategic alliances and contribute to industry thought leadership. What is his professional background? Before joining True Zero, Brewer served as a business development executive at Tyto Athene, which was recently rebranded as Quantum Sky. He was president of AVID INTEGRITY and chief strategy officer at Iron Vine Security, where he worked on corporate strategy, financial performance, market analysis and business development. He was also president and founder of Macrae and served as a partner at Blue Canopy Group for five years. He founded GrayScout in 2012 and served as its principal until the cybersecurity company was acquired by Blue Canopy in 2014. The executive also served as a senior manager within Deloitte & Touche's Cybersecurity practice. Brewer held the roles of chief information security officer and director at the Centers for Medicare & Medicaid Services, where he was named CISO of the Year and helped modernize the cybersecurity program covering more than 300 federal systems. Earlier in his career, Brewer was a trust security officer at the Department of the Interior, principal information security specialist at CACI and senior information security analyst and operations lead supporting the U.S. Agency for International Development.
True Zero Technologies lands spot in DARPA's $350M MANNUS contract. * True Zero Technologies has become the ninth contract awardee for the Defense Advanced Research Agency's Managed Enterprise Network Support Services * The $350 million contract focuses on technical support needed for the Ricoh Pro C7210x/sx commercial production printer * The company will provide product lifecycle, ad-hoc information technology and office assistance to DARPA The company was the latest addition to the MANNUS project, which will provide installation, configuration and other services for the Ricoh Pro C7210x/sx large-format digital production printer. What are the details of True Zero Technologies' contract? True Zero was selected through a small-business set-aside solicitation that received 26 bids. The indefinite-delivery/indefinite-quantity contract which, excludes unexercised options, will be funded through DARPA's fiscal 2026 budget for research, development, testing and evaluation. What is the Purpose of MANNUS? The MANNUS task order was launched to ensure that DARPA's commercial digital production printer, the Ricoh Pro C7210x/sx, meets performance and specification expectations. The printer was acquired to deliver high-quality prints for research, development, testing, marketing and outreach. The agency launched a $700 million request for proposals in 2025, expecting the project to last for a maximum of one month. Who are the other MANNUS contract awardees? Prior to selecting True Zero Technologies, DARPA had awarded eight other small businesses spots in the MANNUS contract. Among them are Nemean Agile Joint Venture, Ares Enterprise, Data Interfuse, Eastern Sky Solutions and two other limited liability corporations: Intelligence and Vertekal. ITFrastructure was the only non-LLC in the roster. DARPA confirmed the eight winning bidders on May 19.