ZipRecruiter

Log In

1

Cyber Security Watch Officer Jobs (NOW HIRING)

Revolutional, LLC

SOC Operations Manager

Kansas City, MO · On-site

$150/hr

The SOC operates under demanding federal cybersecurity compliance requirements and supports ... Tier 2 Threat Watch Officer function and operational leadership * Security event validation, impact ...

AnaVation

Cyber Security Officer, Senior

Reston, VA · On-site

$104K - $134K/yr

As a Senior Cyber Security Officer , you will maintain the operational security posture for an ... Organizing and scheduling 24x7x365 operations in a cybersecurity, IT or related watch environment.

AnaVation

Cyber Security Officer, Senior

Reston, VA

$104K - $134K/yr

As a Senior Cyber Security Officer , you will maintain the operational security posture for an ... Organizing and scheduling 24x7x365 operations in a cybersecurity, IT or related watch environment.

AnaVation

Cyber Security Officer, Senior

Reston, VA · On-site

$104K - $134K/yr

As a Senior Cyber Security Officer , you will maintain the operational security posture for an ... Organizing and scheduling 24x7x365 operations in a cybersecurity, IT or related watch environment.

previous pagenext page

Showing results 21-40

All JobsTechnology JobsNetworking JobsCyber Security Administrator JobsCyber Security Watch Officer Jobs

Cyber Security Watch Officer information

See salary details

$29.5K

$94.9K

$170.5K

How much do cyber security watch officer jobs pay per year?

As of Sep 4, 2026, the average yearly pay for cyber security watch officer in the United States is $94,926.00, according to ZipRecruiter salary data. Most workers in this role earn between $49,500.00 and $127,500.00 per year, depending on experience, location, and employer.

What is a Cyber Security Watch Officer?

A Cyber Security Watch Officer is a professional responsible for monitoring, detecting, and responding to cybersecurity threats and incidents within an organization. They typically work in security operations centers (SOCs), overseeing network activity in real-time to identify potential security breaches or vulnerabilities. Their duties include analyzing security alerts, coordinating incident response efforts, and ensuring proper escalation of threats to the appropriate teams. Watch Officers play a critical role in maintaining the security posture of an organization by ensuring continuous vigilance against cyber threats.

What are the key skills and qualifications needed to thrive as a Cyber Security Watch Officer?

To thrive as a Cyber Security Watch Officer, you need a solid understanding of network security, incident response, and threat analysis, often backed by a degree in cybersecurity or a related field. Familiarity with Security Information and Event Management (SIEM) tools, intrusion detection systems, and certifications like CompTIA Security+ or CISSP is typically required. Strong analytical thinking, attention to detail, and effective communication are crucial soft skills for this role. These skills ensure prompt detection and mitigation of threats, safeguarding organizational assets and maintaining operational security.

What are some typical challenges faced by Cyber Security Watch Officers during incident response?

Cyber Security Watch Officers often face the challenge of rapidly identifying and prioritizing threats amid a high volume of security alerts. During incident response, they must quickly assess the severity of incidents, coordinate with IT and security teams, and ensure accurate documentation under time pressure. Balancing the need for swift action with thorough analysis, while maintaining clear communication with stakeholders, is a common aspect of the role. Successful Watch Officers develop strong situational awareness and adaptability to manage these dynamic scenarios effectively.

What is the difference between Cyber Security Watch Officer vs Cyber Security Analyst?

AspectCyber Security Watch OfficerCyber Security Analyst
CertificationsCompTIA Security+, CISSP (preferred)CompTIA Security+, CISSP, CEH
Work EnvironmentMonitoring security alerts, real-time threat detectionAnalyzing security data, incident investigation
Employer & Industry UsageSecurity operations centers, government agenciesIT firms, corporate security teams

The Cyber Security Watch Officer primarily monitors security systems and responds to alerts in real-time, focusing on threat detection. In contrast, the Cyber Security Analyst analyzes security data, investigates incidents, and develops security strategies. Both roles require similar certifications and often work within security teams, but their daily tasks and focus areas differ.

More about Cyber Security Watch Officer jobs

What cities are hiring for Cyber Security Watch Officer jobs?

Cities with the most Cyber Security Watch Officer job openings:

What states have the most Cyber Security Watch Officer jobs?

States with the most job openings for Cyber Security Watch Officer jobs include:

What job categories do people searching Cyber Security Watch Officer jobs look for?

The top searched job categories for Cyber Security Watch Officer jobs are:

Cyber Security Watch Officer jobs near you
Infographic showing various Cyber Security Watch Officer job openings in the United States as of August 2026, with employment types broken down into 86% Full Time, 12% Part Time, and 2% Contract. Highlights an 91% Physical, 2% Hybrid, and 7% Remote job distribution, with an average salary of $94,926 per year, or $45.6 per hour.

Cyber Security Incident and Event Management/Elastic Specialist

Diligent Consulting Inc

Washington, DC • On-site

$90 - $120/hr

Other

Re-posted 2 hours ago

Job description

Cyber Security Incident and Event Management/Elastic Specialist

US CITIZEN ONLY. SECRET CLEARANCE REQUIRED. MUST HAVE IT-II CERT (IE SECURITY+)

SIEM/Elastic Specialist will:

  • Be responsible for designing & setting up the ingestion of various customer data flows to include pre-processing data into a usable format, ensuring proper parsing and indexing
  • Collaborate with cross-functional teams and responsible for designing & integrating Elastic with a wide variety of data sources and developing associated knowledge objects such as queries, dashboards, reports, alerts for monitoring and analytics
  • Perform data transformation using Elastic query language
  • Track the health of the Elastic environment and optimize its performance. Troubleshoot and resolve issues related to security, performance, data indexing, and searches
  • Perform watch-officer monitoring duties, including:
    • Monitoring, detecting, investigating, and responding to cybersecurity threats and events using Elastic /SIEM Platform
    • Reviewing correlated alerts and logs for compromise scenarios
    • Performing triage of security alerts to prioritize response
    • Identifying false positives
    • Investigating security incidents and determining root cause
    • Collecting and preserving logs for analysis
    • Escalating confirmed incidents to leadership or SOC teams
    • Coordinating with IT or DevOps for containment and remediation
    • Creating after‑action reports (AAR) post‑incident
  • In addition, the role may include assistance with monitoring Vulnerability Management tools, such as ACAS and ePO.
QUALIFICATIONS
  • Have at least three years of working knowledge and hands‑on experience with Elastic/Splunk query languages, monitoring SIEM dashboards and real‑time alerts, fine‑tuning SIEM rules to reduce noise, and NIST 800‑53 & DevSecOps frameworks
#J-18808-Ljbffr

Apply