1

Cybersecurity Operations Jobs in Washington (NOW HIRING)

In this role, the selected candidate supports Task 3 - Cybersecurity Operations Support by assisting with the design and evaluation of cybersecurity architectures for mission systems and enterprise ...

New

Senior Cybersecurity Manager

Herndon, VA · On-site

$140K - $180K/yr

This role provides strategic and operational leadership to ensure the confidentiality, integrity, and availability of systems supporting TSA's mission. The role integrates cybersecurity across on ...

Senior Cybersecurity Manager

Herndon, VA · Hybrid

$140K - $180K/yr

This role provides strategic and operational leadership to ensure the confidentiality, integrity, and availability of systems supporting TSA's mission. The role integrates cybersecurity across on ...

ECS is seeking a Cybersecurity Architect - Journeyman to support the Army National Guard (ARNG) Enterprise Network Operations and Cybersecurity Support program. The role involves designing and ...

New

Cybersecurity Analyst (CDAP) - Senior

Fairfax, VA · On-site

$99K - $128K/yr

This position supports Task 3 - Cybersecurity Operations Support, contributing to a comprehensive and proactive cybersecurity program that defends ARNG classified and unclassified network ...

next page

Showing results 1-20

Cybersecurity Operations information

See Washington salary details

$19

$49

$68

How much do cybersecurity operations jobs pay per hour?

As of Jun 12, 2026, the average hourly pay for cybersecurity operations in Washington is $50.00, according to ZipRecruiter salary data. Most workers in this role earn between $39.18 and $61.78 per hour, depending on experience, location, and employer.

What do cybersecurity operations do?

Cybersecurity operations involve monitoring, detecting, and responding to security threats and incidents to protect an organization’s information systems. Professionals in this field use tools like intrusion detection systems, firewalls, and security information and event management (SIEM) platforms to maintain the security posture and ensure compliance. They often work in shifts and require certifications such as CISSP or Security+ to perform their duties effectively.

How much do cyber operations make?

Cybersecurity operations professionals typically earn between $70,000 and $130,000 annually, depending on experience, certifications, and location. Entry-level roles may start around $60,000, while experienced specialists with certifications like CISSP or CEH can earn higher salaries, especially in high-demand environments with advanced skills in threat detection and incident response.

What are the key skills and qualifications needed to thrive in Cybersecurity Operations, and why are they important?

To excel in Cybersecurity Operations, you need a solid understanding of network security, threat analysis, and incident response, typically supported by a degree in information security or related fields. Familiarity with security information and event management (SIEM) tools, intrusion detection systems, and certifications like CISSP or CompTIA Security+ is highly valued. Strong analytical thinking, attention to detail, and effective communication are crucial soft skills for identifying threats and collaborating with IT teams. These competencies are vital to proactively protect organizational assets, quickly mitigate cyber threats, and ensure regulatory compliance.

What jobs can you get with a cyber operations degree?

A cyber operations degree prepares individuals for roles such as Cybersecurity Analyst, Security Operations Center (SOC) Analyst, Cybersecurity Engineer, and Incident Responder. These positions involve monitoring networks, analyzing security threats, implementing defenses, and responding to cyber incidents, often requiring knowledge of security tools, protocols, and certifications like CompTIA Security+ or CISSP.

Can you make $500,000 a year in cyber security?

Cybersecurity professionals in senior roles such as security directors, chief information security officers (CISOs), or specialized consultants can earn $500,000 or more annually, especially with extensive experience, advanced certifications like CISSP or CISM, and working in high-demand industries or organizations. Entry- and mid-level positions typically have lower salaries, but compensation increases significantly with expertise, leadership responsibilities, and geographic location.

What are some common challenges faced by professionals in Cybersecurity Operations, and how can they be addressed?

Professionals in Cybersecurity Operations often face challenges such as rapidly evolving cyber threats, managing incident response under pressure, and balancing proactive monitoring with reactive defense. Staying current with new attack techniques and tools is essential, which requires continuous learning and adaptation. Collaborating closely with IT, management, and other security teams helps ensure comprehensive coverage and swift action during incidents. Regular training, effective communication, and automating repetitive tasks can help address these challenges and improve operational effectiveness.

What are cybersecurity operations?

Cybersecurity operations refer to the processes and activities involved in protecting an organization's information systems from cyber threats. This includes monitoring networks for suspicious activity, responding to security incidents, managing security tools, and ensuring compliance with security policies. Professionals in this field work to prevent, detect, and respond to cyberattacks, helping to safeguard sensitive data and maintain business continuity. Cybersecurity operations are essential in today's digital landscape where cyber threats are constantly evolving.

What is the difference between Cybersecurity Operations vs Cybersecurity Analyst?

AspectCybersecurity OperationsCybersecurity Analyst
CertificationsCompTIA Security+, CISSP, CEHCompTIA Security+, CISSP, CEH
Work EnvironmentSecurity operations centers, monitoring teamsAnalysis teams, incident response
Employer & Industry UsageOrganizations with dedicated security teamsOrganizations needing security monitoring & analysis

Cybersecurity Operations focuses on managing and monitoring security systems, incident response, and maintaining security infrastructure. In contrast, a Cybersecurity Analyst primarily analyzes security data, identifies threats, and supports incident investigations. Both roles require similar certifications and often work within the same security teams, but their daily tasks and focus areas differ.

Cybersecurity Architect - Journeyman

Cybersecurity Architect - Journeyman

ECS

Fairfax, VA • On-site

Full-time

Posted 2 days ago


Job description

Position Summary
ECS is seeking a Cybersecurity Architect - Journeyman to support the Army National Guard (ARNG) Enterprise Network Operations and Cybersecurity Support (ENOCS) program. In this role, the selected candidate supports Task 3 - Cybersecurity Operations Support by assisting with the design and evaluation of cybersecurity architectures for mission systems and enterprise environments, mapping security controls to architectural components, conducting security impact analyses, and reviewing design documentation for RMF alignment. The Cybersecurity Architect works under senior architectural guidance and provides technical input to engineering, compliance, and operations personnel contributing to ENOCS deliverables across cybersecurity engineering, compliance, vulnerability management, and continuous monitoring.
Please Note: This position is contingent upon contract award.
This position supports a mission environment delivering DoDIN services and cybersecurity operations for more than 120,000 users and approximately 141,000 endpoints across about 2,800 sites in 54 states and territories. The role contributes to protecting both classified and unclassified ARNG network environments in support of Title 10 and Title 32 missions, mobilization readiness, domestic emergency response, and SIPRNet operations. The Cybersecurity Architect will operate within a technical ecosystem that includes RMF and eMASS-based authorization activities, USIEM-aligned monitoring and analytics, EDR-supported defensive operations, STIG and IAVM compliance activities, and coordination across ARNG's broader DCO-IDM mission in concert with organizations such as the NETCOM Global Cyber Center and DISA DCDC.
Responsibilities
  • Support the design and evaluation of cybersecurity architectures for enterprise and mission systems within Task 3 - Cybersecurity Operations Support.
  • Map security controls to architectural components and assist in validating that proposed designs align with RMF requirements and authorized security boundaries.
  • Conduct security impact analyses for system and design changes, documenting implications to confidentiality, integrity, availability, and overall cyber risk posture.
  • Review engineering and design documentation to identify cybersecurity gaps, compliance issues, and required updates under senior architectural guidance.
  • Provide technical cybersecurity input to engineering teams supporting ARNG classified and unclassified environments, including systems operating across NIPRNet- and SIPRNet-associated enterprise contexts.
  • Assist with documentation and evidence development that supports eMASS records, security plans, self-assessments, and POA&M activities for RMF compliance.
  • Help validate that architectures account for continuous monitoring requirements, including alignment with STIGs, IAVMs, and related compliance controls used across the ENOCS cyber environment.
  • Coordinate with cybersecurity operations and engineering stakeholders to support architectures informed by USIEM, EDR, and other enterprise defensive monitoring capabilities.
  • Contribute to architecture reviews and compliance validation activities supporting ARNG Defensive Cyberspace Operations - Internal Defensive Measures (DCO-IDM) across the DoDIN-Army-NG area of responsibility.
  • Support collaboration with broader cyber mission partners and operational stakeholders, including coordination points tied to NETCOM Global Cyber Center and DISA DCDC-directed cybersecurity operations.

Required Qualifications
U.S. Citizenship is required
Security Clearance: Secret Eligible
Required Certifications: DCWF Work Role 652-Security Architect - Basic proficiency; must hold ONE OR MORE of the following: GCLD, GISF
Experience: 3+ years of experience in cybersecurity
  • Experience supporting cybersecurity architecture, design review, or security engineering activities for enterprise or mission systems.
  • Ability to map security controls to system components and assess the security impact of architecture or design changes.
  • Experience reviewing technical documentation for RMF alignment, compliance completeness, and implementation traceability.
  • Experience supporting documentation and validation activities related to eMASS, security plans, self-assessments, or POA&M development.
  • Familiarity with STIG, IAVM, and continuous monitoring concepts used in DoD cybersecurity programs.
  • Ability to provide technical input to engineering and operations teams while working under senior architectural oversight.
  • Experience producing clear written technical documentation to support compliance reviews, architecture decisions, and security assessments.