ZipRecruiter

Log In

1

Cyber Watch Officer Jobs (NOW HIRING)

GDIT

Watch Officer (Shift Lead)

Arlington, VA · On-site

$20.75 - $25.25/hr

Cyber Operations, Incident Management, Operational Reporting Certifications: None Experience: 10 + years of related experience US Citizenship Required: Yes Watch Officer (Shift Lead) Position Summary ...

Leidos

Cyber Security Watch Officer

Odenton, MD · On-site

Serve as a Cyber Security Watch Officer (CSWO) on the DISA GSM-O II program supporting the DISA ... CSWOs are principally engaged in the triage of events, cyber incident handling, network analysis ...

Leidos

Cyber Security Watch Officer

Odenton, MD

Serve as a Cyber Security Watch Officer (CSWO) on the DISA GSM-O II program supporting the DISA ... CSWOs are principally engaged in the triage of events, cyber incident handling, network analysis ...

SOSi

SOC Watch Officer

Chandler, AZ · On-site

$15.75 - $18.75/hr

Overview SOSi is seeking a SOC Watch Officer to support Security Operations Center (SOC) activities ... cyber defense operations, security monitoring, and event analysis • Provide leadership and ...

SOSi

SOC Watch Officer

Chandler, AZ · On-site

$15.75 - $18.75/hr

Overview SOSi is seeking a SOC Watch Officer to support Security Operations Center (SOC) activities ... cyber defense operations, security monitoring, and event analysis Provide leadership and ...

Peraton

SOC Watch Officer / Shift Supervisor

Chandler, AZ · On-site

$66K - $106K/yr

Responsibilities Peraton's Cyber Mission sector is looking for a SOC Watch Officer / Shift Supervisor to support the Department of Homeland Security. Location: Chandler, AZ. Position Overview Peraton ...

Peraton

SOC Watch Officer / Shift Supervisor

Chandler, AZ · On-site

$66K - $106K/yr

Responsibilities Peraton's Cyber Mission sector is looking for a SOC Watch Officer / Shift Supervisor to support the Department of Homeland Security. Location: Chandler, AZ. Position Overview Peraton ...

SOSi

SOC Watch Officer with Security Clearance

Chandler, AZ · On-site

$16.75 - $19.75/hr

Overview SOSi is seeking a SOC Watch Officer to support Security Operations Center (SOC) activities ... cyber defense operations, security monitoring, and event analysis • Provide leadership and ...

next page

Showing results 1-20

All JobsTechnology JobsNetworking JobsCyber Security Administrator JobsCyber Watch Officer Jobs

Cyber Watch Officer information

See salary details

$46.5K

$115K

$132K

How much do cyber watch officer jobs pay per year?

As of Sep 11, 2026, the average yearly pay for cyber watch officer in the United States is $114,974.00, according to ZipRecruiter salary data. Most workers in this role earn between $116,500.00 and $116,500.00 per year, depending on experience, location, and employer.

What is a Cyber Watch Officer?

Cyber Watch Officers are professionals responsible for monitoring, detecting, and responding to cyber threats within an organization or government agency. They work in security operations centers (SOCs) to ensure continuous surveillance of networks and systems, often providing real-time analysis of security incidents. Their duties include coordinating incident response, escalating critical threats, and maintaining situational awareness of the cyber threat landscape. Cyber Watch Officers play a key role in protecting sensitive data and supporting overall cybersecurity efforts.

What are the typical daily responsibilities of a Cyber Watch Officer and how do they interact with other teams?

A Cyber Watch Officer is responsible for continuously monitoring network activity, analyzing security alerts, and coordinating incident response efforts. On a daily basis, they review security logs, triage alerts, escalate critical incidents, and prepare situation reports. Cyber Watch Officers work closely with security analysts, incident response teams, and IT departments to ensure a rapid and coordinated response to threats. The role also involves regular communication with management to provide updates and recommendations, making collaboration and clear communication essential.

What are the key skills and qualifications needed to thrive as a Cyber Watch Officer, and why are they important?

To thrive as a Cyber Watch Officer, you need a solid foundation in cybersecurity principles, incident response, and network monitoring, typically supported by a degree in information technology or cybersecurity and relevant certifications like Security+ or CISSP. Familiarity with Security Information and Event Management (SIEM) tools, intrusion detection systems, and ticketing platforms is essential. Analytical thinking, attention to detail, and effective communication are standout soft skills for this role. These skills and qualifications are crucial for promptly identifying, assessing, and responding to cyber threats to ensure organizational security.

What is the difference between Cyber Watch Officer vs Cyber Security Analyst?

AspectCyber Watch OfficerCyber Security Analyst
CertificationsCompTIA Security+, CISSP (preferred)CompTIA Security+, CISSP, CEH
Work EnvironmentMonitoring security alerts, real-time threat detectionAnalyzing security data, incident response planning
Employer & Industry UsageSecurity operations centers, government agenciesIT firms, corporate security teams

While both roles focus on cybersecurity, the Cyber Watch Officer primarily monitors security alerts and detects threats in real-time, often working in security operations centers. The Cyber Security Analyst conducts in-depth analysis, investigates incidents, and develops security strategies. Both roles require similar certifications but differ in daily responsibilities and work environment.

More about Cyber Watch Officer jobs

What cities are hiring for Cyber Watch Officer jobs?

Cities with the most Cyber Watch Officer job openings:

What states have the most Cyber Watch Officer jobs?

States with the most job openings for Cyber Watch Officer jobs include:

What are popular job titles related to Cyber Watch Officer jobs?

For Cyber Watch Officer jobs, the most frequently searched job titles are:

Cyber Watch Officer jobs near you
Infographic showing various Cyber Watch Officer job openings in the United States as of September 2026, with employment types broken down into 1% Internship, 91% Full Time, and 8% Part Time. Highlights an 96% Physical, 1% Hybrid, and 3% Remote job distribution, with an average salary of $114,974 per year, or $55.3 per hour.

Watch Officer (Shift Lead)

Arlington, VA • On-site

GDIT
IT Services • 10K+ employees
Learn more about GDITexternal

$20.75 - $25.25/hr

Full-time

Medical, Dental, Vision, Life, Retirement, PTO

This job post has expired 4 days ago. Applications are no longer accepted.

General Dynamics Information Technology rating

7.8

Company rating: 7.8 out of 10

Based on 63 frontline employees who took The Breakroom Quiz

Job description

Type of Requisition:

Regular

Clearance Level Must Currently Possess:

Interim Secret

Clearance Level Must Be Able to Obtain:

Top Secret/SCI

Public Trust/Other Required:

None

Job Family:

Cyber and IT Risk Management

Job Qualifications:

Skills:

Cyber Operations, Incident Management, Operational Reporting

Certifications:

None

Experience:

10 + years of related experience

US Citizenship Required:

Yes

Job Description:

Watch Officer (Shift Lead)
Position Summary
The Watch Officer serves as the senior authority on the watch floor for an assigned shift in a 24x7x365 cyber command center supporting national cyber defense across Critical Infrastructure, SLTT, and Federal Civilian partners. This role directs monitoring, triage, escalation, and coordination activities throughout the shift and is accountable for maintaining an accurate operational picture for turnover. The Watch Officer determines escalation thresholds, approves actions within established authorities, guides analysts, and acts as the first response when operational tempo increases.

Key Responsibilities

Shift Command & Floor Authority

  • Lead watch-floor operations and direct analyst activity.
  • Maintain the operational picture of active watch items, incidents, and escalations.
  • Exercise approval authority within defined thresholds and identify when higher-level approval is required.
  • Make timely escalation decisions based on established criteria.
  • Ensure tools, systems, and displays support realtime decision making.

Review of Analytic Output

  • Review assessments and recommended actions before presentation to leadership.
  • Hold or return products that do not meet standards.
  • Distinguish between immediate operational needs and items requiring longer-term analysis.

Incident Triage, Escalation & Coordination

  • Direct initial triage and ensure response actions begin within required timelines.
  • Determine escalation pathways for incidents involving Critical Infrastructure, SLTT, and Federal partners.
  • Identify appropriate authorities for recommended actions and distinguish those executable on shift from those requiring external approval.
  • Coordinate with federal law enforcement, National Guard, state response teams, and reachback support.
  • Ensure incident records are complete, accurate, and properly scored using NCISS.

Situational Awareness & Reporting

  • Maintain shared situational awareness across the floor and with mission partners.
  • Oversee shift contributions to daily, weekly, and monthly reporting.
  • Ensure decisions are documented with rationale and aligned to required formats and timelines.

Shift Turnover & Battle Rhythm

  • Execute structured shift turnover with a complete and accurate picture of open incidents and outstanding actions.
  • Maintain reporting cycles, required checks, and coordination points.
  • Document shift activity for continuity, review, and compliance.
  • Apply classification requirements and identify content requiring downgrade requests.

Team Direction, Training & Readiness

  • Guide analysts through tasking, feedback, and onthejob development.
  • Ensure personnel maintain required certifications and training.
  • Support onboarding and qualification of new analysts.

Surge & Crisis Response

  • Coordinate expanded coverage during elevated operational tempo.
  • Support crisis action teams and ensure sustained response capability.
  • Maintain readiness to extend or backfill coverage during surge periods.

Required Qualifications

  • Experience as a watch officer or shift lead in a 24x7 SOC, fusion center, or incident command environment.
  • Strong knowledge of incident triage, escalation, and lifecycle management.
  • Proven ability to make timesensitive operational decisions under pressure.
  • Experience exercising operational approval authority.
  • Experience with shift turnover and operational reporting.
  • Familiarity with NCISS or similar incident scoring frameworks.
  • Bachelor's degree and 10+ years of cybersecurity experience, including team leadership.
  • Active Top Secret clearance.

Preferred Qualifications

  • Experience supporting nationallevel cyber operations centers.
  • Experience establishing or maturing watchfloor processes.
  • Experience reviewing analytic or tooling output prior to leadership consumption.
  • Experience coordinating with federal, SLTT, and privatesector partners during incidents.
  • Awareness of ICS/OT environments.
  • Certifications such as CISSP, GCIH, GCIA, GCTI, or similar.


GDIT IS YOUR PLACE
At GDIT, the mission is our purpose, and our people are at the center of everything we do.
Growth: AI-powered career tool that identifies career steps and learning opportunities
Support: An internal mobility team focused on helping you achieve your career goals
Rewards: Comprehensive benefits and wellness packages, 401K with company match, and competitive pay and paid time off
Community: Award-winning culture of innovation and a military-friendly workplace
OWN YOUR OPPORTUNITY
Explore a career in cyber at GDIT and you'll find endless opportunities to grow alongside colleagues who share your focus on defending and protecting what matters.

The likely salary range for this position is $153,000 - $207,000. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.

Scheduled Weekly Hours:

40

Travel Required:

Less than 10%

Telecommuting Options:

Hybrid

Work Location:

USA VA Arlington

Additional Work Locations:

Total Rewards at GDIT:

Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match. To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave. To ensure our employees are able to protect their income, other offerings such as short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available. We regularly review our Total Rewards package to ensure our offerings are competitive and reflect what our employees have told us they value most.

Our Identity Verification Process:

As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during virtual interviews. We reserve the right to take your picture to verify your identity and prevent fraud. By proceeding, you authorize the collection, processing, and use of your biometric data for identity verification and security purposes.

About Our Work:

We are GDIT. A global technology and professional services company that delivers technology solutions and mission services to every major agency across the U.S. government, defense and intelligence community. Our 26,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50+ countries worldwide, offering leading mission-ready capabilities in AI, cloud, cyber and software development.Join our Talent Community to stay up to date on our career opportunities and events at

gdit.com/tc.

Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans

What General Dynamics Information Technology employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom

General Dynamics Information Technology logo

About General Dynamics Information Technology

Sourced by ZipRecruiter

GDIT is a global technology and professional services company that delivers technology solutions and mission services to every major agency across the U.S. government, defense, and intelligence community. Its 30,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. The company operates across 50+ countries worldwide, offering leading capabilities in digital modernization, AI/ML, cloud, cyber, and application development.

Industry

It services

Company size

10,000+ Employees

Headquarters location

Falls Church, VA, US

View All General Dynamics Information Technology Jobs

Apply