{"id":2587854,"url":"https://alion.io/job/cfocussoftware-usaf-security-operations-analyst-cfocus-software-incorporated","title":"USAF - Security Operations Analyst - cFocus Software Incorporated","company":{"id":4419850,"name":"cFocus Software Incorporated","domain":"cfocussoftware.com","url":"https://alion.io/company/cfocussoftware","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"JazzHR","truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Linthicum Heights, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":102000,"max_usd":233000,"period":"year","method":"role_country_seniority_unknown","sample_n":3177},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[],"status":"live","first_seen_at":"2026-10-15T04:37:32Z","employer_posted_date":"2026-10-15","last_verified_at":"2026-10-15T18:34:52Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"cFocus Software seeks a Security Operations Analyst to join our program supporting the United States Air Force (USAF). This position is on-site in Linthicum Heights, MD. This position requires an Active TS/SCI clearance.\nQualifications:\nActive TS/SCI clearance\nB.S. Computer Science, Information Technology, or a related field\nExperience monitoring security events, investigating alerts, and supporting enterprise incident response.\nAbility to correlate telemetry, assess anomalies, and document investigation findings.\nKnowledge of network protocols, endpoints, access controls, and cyberattack techniques.\nExperience with security monitoring, log analysis, endpoint detection, and vulnerability tools.\nAbility to hunt threats and apply intelligence to investigations and detection improvements.\nUnderstanding of incident response, evidence handling, and approved escalation procedures.\nAbility to analyze vulnerabilities and coordinate remediation with technical teams.\nStrong analytical judgment, collaboration, and writing skills for timely investigations\n Duties:Monitor and triage security alerts, logs, and events; correlate available telemetry to identify suspicious activity and potential threats.\nAnalyze network, endpoint, application, and cloud security data within assigned environments to determine event validity, severity, scope, and mission impact.\nConduct data and intelligence-driven threat hunting to identify hidden or advanced threats in DC3 IT and OT environments.\nInvestigate anomalous behavior, distinguish false positives from potential incidents, and document evidence, findings, and recommended responses.\nDetect, analyze, and respond to suspected security incidents; escalate confirmed incidents through established Government-approved procedures.\nPerform assigned containment, eradication, and recovery activities upon incident confirmation, within authorized procedures and access permissions.\nMaintain incident records, timelines, investigation notes, and supporting evidence in accordance with approved handling and documentation procedures.\nCoordinate incident response and recovery with infrastructure, network, application, cloud, and cybersecurity teams; verify assigned corrective actions.\nAnalyze vulnerability assessment findings, support risk prioritization and remediation tracking, and coordinate validation with certified assessment specialists.\nProvide continuous analysis of security events and trends; recommend detection improvements and mitigation actions for Government consideration.\nSupport operation and maintenance of assigned SOC tools and sensors; identify telemetry gaps and coordinate corrective action with responsible teams.\nSupport SOC coordination with Cybersecurity Service Providers (CSSPs), the AFCYBER Operations Center, and applicable higher headquarters authorities.\nTrack assigned cyber orders and taskers; coordinate status, required actions, and supporting evidence through approved command and control channels.\nContribute incident response procedures, lessons learned, security monitoring documentation, and evidence supporting compliance activities.\nResearch emerging threats, cybersecurity practices, and technologies; document benefits, risks, and implementation recommendations.","description_format":"text","description_chars":3255,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response"],"lifecycle":[{"event":"open","at":"2026-10-15T04:37:32Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":28,"reasons":["conf:1","win:early"],"computed_at":"2026-10-15T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/cfocussoftware-usaf-security-operations-analyst-cfocus-software-incorporated","json_url":"https://alion.io/job/cfocussoftware-usaf-security-operations-analyst-cfocus-software-incorporated.json","meta":{"generated_at":"2026-10-15T21:02:43Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":31943,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4419850},"rest":"https://alion.io/mcp/rest/get_company?id=4419850"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcfocussoftware-usaf-security-operations-analyst-cfocus-software-incorporated"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcfocussoftware-usaf-security-operations-analyst-cfocus-software-incorporated"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcfocussoftware-usaf-security-operations-analyst-cfocus-software-incorporated"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/cfocussoftware-usaf-security-operations-analyst-cfocus-software-incorporated\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcfocussoftware-usaf-security-operations-analyst-cfocus-software-incorporated"}]}