Defensive Cyber Operations Watch Stander / Information Security Analyst

About Knexus

At Knexus, we are at the forefront of AI development for the government, with a mission to revolutionize how the government serves its citizens. As a pioneer in the field, we've spent nearly two decades pushing the boundaries of what is possible with artificial intelligence. Our work has a direct, mission-driven impact, and our partnership with Google Cloud gives our team unparalleled access to the latest tools and expertise.

Role Overview

S4 LLC (a wholly owned subsidiary of Knexus Research LLC) is seeking a Cyber Operations Watch Stander to support the NORAD and USNORTHCOM Cyberspace Operations Directorate under the Enterprise Machine Learning Analytics and Persistent Services 2 (eMAPS2) program. This position provides 24/7 on-site analysis for real world cyberspace threats to cyber terrain and characterizes the threats and mission impact of cyberspace vulnerabilities to operations by monitoring cyber threats, assessing mission impacts, analyzing vulnerabilities, and delivering timely operational reporting that enables informed command decisions. Supports a 24/7 mission environment and requires rotating shifts, nights, weekends, holidays, or extended operational support during contingencies and exercises.

Key Responsibilities

• Monitor and analyze cyber threats affecting USNORTHCOM systems in a 24/7 operational environment.
• Assess cyber incidents, vulnerabilities, and mission impacts, and recommend defensive courses of action.
• Produce threat assessments, operational reports, executive briefings, and cyber situational awareness products.
• Monitor cyber taskings, advisories, vulnerability alerts, and incident reporting to support mission readiness.
• Develop and maintain operational procedures, watch checklists, Tactics, Techniques, and Procedures (TTPs), and cyber playbooks.
• Participate in cyber exercises, incident response activities, technical exchanges, and after-action reviews.
• Collaborate with Government stakeholders and mission partners to enhance cyber readiness and operational awareness.
• Research emerging cyber threats and provide recommendations to strengthen the Government's cyber posture.

Required Qualifications

• Active/current Top Secret clearance with SCI eligibility
• Current CompTIA Security+ certification
• Must be a U.S. citizen
• Experience supporting Cyber Operations Centers, Security Operations Centers (SOC), Network Operations Centers (NOC), or military watch floor operations.
• Experience analyzing cybersecurity events, vulnerabilities, incidents, and operational impacts.
• Knowledge of cyber threat intelligence, defensive cyber operations, and incident response.
• Experience preparing technical reports, operational briefings, and executive-level products.
• Strong analytical, critical thinking, and written communication skills.
• Ability to work effectively in a fast-paced operational environment supporting national security missions.

Preferred Qualifications

• Experience supporting Combatant Commands or Department of War cyber operations.
• Familiarity with USCYBERCOM, JFHQ-DoDIN, DISA, NSA, or CISA operations.
• Experience with cyber threat intelligence analysis and mission assurance.
• Experience participating in military exercises, cyber planning events, or contingency operations.
• Knowledge of DoD cyber policies, CTASKORDs, OPORDs, WARNORDs, IAVAs, and cyber reporting processes.