ZipRecruiter

Log In

1

Defensive Cyber Operations Jobs (NOW HIRING)

CACI

Cyber Operations Integrator

Eglin, FL · On-site

You will conduct cyber intelligence analysis, target development, and vulnerability assessments supporting offensive and defensive cyber operations (OCO/DCO). The COI will integrate cyber ...

previous page

Showing results 41-60

All JobsTechnology JobsNetworking JobsCyber Security Engineer JobsDefensive Cyber Operations Jobs

Defensive Cyber Operations information

See salary details

$38.5K

$58.2K

$87K

How much do defensive cyber operations jobs pay per year?

As of Sep 5, 2026, the average yearly pay for defensive cyber operations in the United States is $58,171.00, according to ZipRecruiter salary data. Most workers in this role earn between $48,000.00 and $64,500.00 per year, depending on experience, location, and employer.

What is defensive cyber operations?

Defensive Cyber Operations (DCO) refer to activities and strategies designed to protect computer networks, systems, and data from unauthorized access, attacks, and other cyber threats. These operations involve monitoring, detecting, analyzing, and responding to cyber incidents to ensure the security and integrity of information systems. Professionals in this field implement security measures, conduct risk assessments, and develop incident response plans to minimize damage from potential cyberattacks. DCO is essential for government, military, and private sector organizations to safeguard critical infrastructure and sensitive data.

What are the key skills and qualifications needed to thrive in defensive cyber operations?

To thrive in Defensive Cyber Operations, you need a solid grounding in network security, threat analysis, and incident response, often backed by a degree in cybersecurity or related fields. Familiarity with security information and event management (SIEM) tools, intrusion detection/prevention systems, and certifications like CompTIA Security+ or CISSP are typically required. Strong problem-solving skills, attention to detail, and effective communication help professionals excel when mitigating threats and collaborating with teams. These skills and qualifications are crucial for proactively defending organizational assets and ensuring robust cyber resilience.

What are some typical challenges faced by professionals in defensive cyber operations, and how can new team members prepare for them?

Professionals in Defensive Cyber Operations often encounter challenges such as rapidly evolving threats, high-pressure incident response situations, and the need to coordinate across multiple departments. New team members can prepare by staying current with the latest threat intelligence, practicing effective communication skills, and familiarizing themselves with the organization's security tools and protocols. Building strong relationships with IT, legal, and management teams also helps ensure smooth collaboration during security events.

What is the difference between Defensive Cyber Operations vs Cybersecurity Analyst?

AspectDefensive Cyber OperationsCybersecurity Analyst
CertificationsCompTIA Security+, CISSP, CEHCompTIA Security+, CISSP, CEH
Work EnvironmentMilitary, government, or specialized security teamsCorporate, government, or consulting firms
Primary FocusProactive defense, threat hunting, incident responseMonitoring, analyzing, and responding to security threats
Industry UsagePrimarily in government and military sectorsWidely in private and public sectors

Defensive Cyber Operations and Cybersecurity Analysts share similar certifications and work environments, but Defensive Cyber Operations focus more on proactive defense and threat hunting within specialized teams, often in government or military settings. Cybersecurity Analysts typically monitor and respond to threats across various industries, emphasizing analysis and incident response.

What do defensive cyber operations do?

Defensive cyber operations involve protecting computer networks and systems from cyber threats by monitoring for malicious activity, implementing security measures, and responding to security incidents. Professionals in this field use tools like intrusion detection systems and firewalls, often holding certifications such as CISSP or CEH. Their goal is to prevent, detect, and mitigate cyber attacks to ensure the security and integrity of digital assets.
More about Defensive Cyber Operations jobs

What cities are hiring for Defensive Cyber Operations jobs?

Cities with the most Defensive Cyber Operations job openings:

What job categories do people searching Defensive Cyber Operations jobs look for?

The top searched job categories for Defensive Cyber Operations jobs are:

Defensive Cyber Operations jobs near you
Infographic showing various Defensive Cyber Operations job openings in the United States as of August 2026, with employment types broken down into 84% Full Time, 13% Part Time, 1% Temporary, 1% Contract, and 1% Nights. Highlights an 94% Physical, 2% Hybrid, and 4% Remote job distribution, with an average salary of $58,171 per year, or $28 per hour.

Defensive Cyber Operations Watch Stander / Information Security Analyst

Knexus

Colorado Springs, CO • On-site

$65K - $68K/yr

Full-time

Re-posted 14 hours ago

Job description

About Knexus
At Knexus, we are at the forefront of AI development for the government, with a mission to revolutionize how the government serves its citizens. As a pioneer in the field, we've spent nearly two decades pushing the boundaries of what is possible with artificial intelligence. Our work has a direct, mission-driven impact, and our partnership with Google Cloud gives our team unparalleled access to the latest tools and expertise.
Role Overview
S4 LLC (a wholly owned subsidiary of Knexus Research LLC) is seeking a Cyber Operations Watch Stander to support the NORAD and USNORTHCOM Cyberspace Operations Directorate under the Enterprise Machine Learning Analytics and Persistent Services 2 (eMAPS2) program. This position provides 24/7 on-site analysis for real world cyberspace threats to cyber terrain and characterizes the threats and mission impact of cyberspace vulnerabilities to operations by monitoring cyber threats, assessing mission impacts, analyzing vulnerabilities, and delivering timely operational reporting that enables informed command decisions. Supports a 24/7 mission environment and requires rotating shifts, nights, weekends, holidays, or extended operational support during contingencies and exercises.
Key Responsibilities
  • Monitor and analyze cyber threats affecting USNORTHCOM systems in a 24/7 operational environment.
  • Assess cyber incidents, vulnerabilities, and mission impacts, and recommend defensive courses of action.
  • Produce threat assessments, operational reports, executive briefings, and cyber situational awareness products.
  • Monitor cyber taskings, advisories, vulnerability alerts, and incident reporting to support mission readiness.
  • Develop and maintain operational procedures, watch checklists, Tactics, Techniques, and Procedures (TTPs), and cyber playbooks.
  • Participate in cyber exercises, incident response activities, technical exchanges, and after-action reviews.
  • Collaborate with Government stakeholders and mission partners to enhance cyber readiness and operational awareness.
  • Research emerging cyber threats and provide recommendations to strengthen the Government's cyber posture.
Required Qualifications
  • Active/current Top Secret clearance with SCI eligibility
  • Current CompTIA Security+ certification
  • Must be a U.S. citizen
  • Experience supporting Cyber Operations Centers, Security Operations Centers (SOC), Network Operations Centers (NOC), or military watch floor operations.
  • Experience analyzing cybersecurity events, vulnerabilities, incidents, and operational impacts.
  • Knowledge of cyber threat intelligence, defensive cyber operations, and incident response.
  • Experience preparing technical reports, operational briefings, and executive-level products.
  • Strong analytical, critical thinking, and written communication skills.
  • Ability to work effectively in a fast-paced operational environment supporting national security missions.
Preferred Qualifications
  • Experience supporting Combatant Commands or Department of War cyber operations.
  • Familiarity with USCYBERCOM, JFHQ-DoDIN, DISA, NSA, or CISA operations.
  • Experience with cyber threat intelligence analysis and mission assurance.
  • Experience participating in military exercises, cyber planning events, or contingency operations.
  • Knowledge of DoD cyber policies, CTASKORDs, OPORDs, WARNORDs, IAVAs, and cyber reporting processes.

Apply