Senior Cyber Security Operator

With more than twenty years of securing some of the U.S. Department of Defense and the Intelligence Community's most critical networks, JFL Consulting, LLC provides advanced network security solutions to a range of US Government and US commercial clients. Our cybersecurity operators are experts at assessing and defending mission-critical data and the networks that facilitate their operation. We are focused on delivering advanced products and industry best practices that meet each customer's unique requirements. Visit  

Job Description

JFL Consulting, LLC is seeking a Senior Cyber Security Operator to support critical cybersecurity operations within highly secure environments. This role offers the opportunity to work on advanced network defense strategies, with a unique focus on passive vulnerability analysis: a specialized and low-impact method of identifying risks without active scanning. You'll play a key role in detecting anomalies, analyzing complex systems, and strengthening network security for high-value missions. This position is ideal for professionals who enjoy deep technical work, problem-solving, and contributing to meaningful national security efforts within a collaborative, mission-driven team.

Job Title: Senior Cyber Security Operator

Place of Performance: Bellevue, NE 68005

Mandatory Requirements: Top Secret Clearance (SCI Eligible)

Experience Level: Senior-Level (8+ years in cybersecurity, 3+ years in passive vulnerability analysis)

Responsibilities:

• Ensure the safe and proper functional operation of the toolkit and its components.
• Collect and document measures of performance per approved CONOPS.
• Analyze and document behaviors, characteristics, and attributes of a network's baseline activity within steady-state operations.
• Analyze and investigate potential anomalies or outliers from established baseline.
• Analyze and identify misconfigurations, faults, and vulnerabilities within the network's architecture, subcomponents, and utilized communication protocols.
• Determine root source of anomalies and extent of vulnerable findings for validation with system users and administrators.
• Document and report anomalies to appropriate channels for further investigation and notification.
• Document vulnerable findings and provide recommendations through appropriate channels that increase both security and operational capacity of the respective network.
• Recommend improvements to current operations for potential incorporation into the overall program.
• Collaborate with cross-functional teams to support incident response, system hardening, and policy development as needed.
• Additional duties as assigned
• 5-10% Conus Travel

Requirements

Education:

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or a related field preferred. Equivalent work experience may be considered in lieu of a degree.
• A master's degree is a plus.

Certifications:

• Must hold an IAT Level II certification as defined and described in DoDD , M, and –03, and as amended. (e.g., Security+ CE, CySA+, CCNA Security, GSEC).
• Must hold a CSSP Analyst certification as defined and described in DoDD , M, and –03, and as amended. (e.g., CEH, CySA+, GCIA, GCIH).
• Preferred: Advanced certifications such as CISSP (Certified Information Systems Security Professional), OSCP (Offensive Security Certified Professional), or similar.

Experience:

• Minimum 8 years in cybersecurity operations or analysis
• Minimum 3 years of experience with passive vulnerability detection techniques
• Experience supporting DoD or Intelligence Community networks 

Technical Skills:

• Practical experience with firewalls, network TAPs, IDS/IPS, endpoint protection, and other network defense technologies
• Adept in evaluating network protocols utilizing network analyzers, such as Wireshark, Tshark, and tcpdump
• Experienced in analyzing network datasets, including Zeek and firewall logs, to support threat hunting and security investigations.
• Experienced in leveraging data analysis platforms, such as Splunk, Kibana, and Arkime, to detect and analyze anomalous network activity
• Proficient in triaging Suricata alerts, tuning rules, and creating custom detections.

Knowledge:

• In-depth understanding of network vulnerabilities and misconfigurations
• Strong knowledge of cybersecurity principles, adversary techniques, and detection/response strategies
• Experience working within the framework of a CONOPS or similar operational document
• Awareness of DoD cybersecurity frameworks (e.g., RMF, CMMC, NIST and their application in secure system design and monitoring.
• Knowledge of common enterprise network architectures and defense mechanisms
• Experienced in analyzing TCP/IP, DNS, HTTP/S, SSL/TLS, SMB, and RDP protocols to identify vulnerabilities, misconfigurations, and indicators of malicious activity.

Soft Skills:

• Strong analytical and investigative mindset
• Excellent documentation and reporting skills
• Effective communicator with ability to explain technical issues to both technical and non-technical audiences
• Comfortable working independently and as part of a cross-functional team

Competitive Benefits Package Includes:

• 100% employer-paid medical, dental, and vision for employees and dependents
• 401(k) with 3% company contribution and immediate vesting
• Generous PTO policy (15 vacation, 5 sick, 2 personal days)
• Reimbursement for job-related certifications, generous training budget and company provided access to training platforms.

JFL Consulting, LLC is an Equal Opportunity Employer.

We do not discriminate against any applicant for employment on any legally recognized basis including, but not limited to: race, religion or creed, color, national origin, sex, age, disability, marital status, sexual orientation, genetic information, veteran status, status with regard to public assistance or any other protected class under federal, state or local statute. It is also the policy of JFL Consulting, LLC to provide reasonable accommodations for qualified individuals with disabilities.