Security Operations

• Run daily, weekly, and periodic IT and security checklists, with a focus on Google SecOps/Chronicle monitoring
• Perform health checks across GCP infrastructure, SaaS applications, and security tooling (alerts, compliance, CI/CD pipelines)
• Troubleshoot security or infrastructure issues, document fixes, and raise follow-up actions
• Collaborate with DevOps and InfraOps on platform-level and security-related issues
• Identify and propose security and platform improvements as you gain business context
• Implement automation, security tooling, and platform enhancements to strengthen cloud and SaaS environments
• Contribute to scripts, dashboards, and operational improvements with a focus on security and compliance
• Feed insights from day-to-day work into long-term IT security and operational strategy
• Occasionally assist with IT support tasks across systems, hardware, and software
• Prioritize tasks effectively and align timelines with stakeholders

IT & Security Operations Analyst

• Track executive aircraft in flight and assist with communications issues.
• Respond to incident calls involving airborne Mission Communications Systems.
• Provide expert guidance on MCS operations aboard C-32A, C-40B/C, and C-37A/B aircraft.
• Assist onboard Communications Systems Operators with troubleshooting anomalies and outages.
• Use Command and Control tools and secure collaboration platforms to support active missions.
• Coordinate with GSOC personnel, airborne crews, network engineers, and external service providers.
• Monitor communications status and help identify recurring issues and operational trends.
• Review flight-monitoring solutions provided by commercial satellite communications providers.
• Recommend improvements to monitoring, troubleshooting, and incident-response processes.
• Document incident details, troubleshooting actions, status updates, and resolutions.
• Support after-action reviews and trend analysis following mission-impacting events.
• Maintain awareness of aircraft communications configurations, capabilities, and operating procedures.
• Respond to urgent situations within established performance timelines.
• Maintain continuous mission support during assigned shifts, including weekends and federal holidays.

Government Security Operations Center Communications Systems Operator – Liaison

• Lead vulnerability management and secure configuration operations, ensuring alignment with federal cybersecurity mandates.
• Manage, monitor, and report vulnerabilities across NIH/HHS systems using tools such as Invicti and coordinate timely remediation activities.
• Develop vulnerability prioritization models based on risk, exposure, and asset criticality.
• Develop secure configuration baselines and monitoring processes based on CIS Benchmarks.
• Ensure compliance with patching timelines and federal vulnerability directives.
• Collaborate with infrastructure, application, and security teams to validate remediation actions.
• Support preparation of reports for leadership and federal oversight bodies.
• Develop KPI metrics for vulnerability and compliance gap closure rates, asset risk scoring, and compliance tracking.

Cybersecurity Operations Consultant

• Lead in daily SOC operations and provide task management and operational oversight.
• Manage user accounts, roles, and permissions across application portfolio.
• Monitor and report on system health concerns for alarms access control, surveillance, incident management and other security systems.
• Supervise the Security Operations team to ensure seamless and continuous GSOC support.
• Validate that operator actions align with runbook and site-specific requirements.
• Coordinate with site security, facilities, REFM, IT, HR, Legal, Comms, and business leadership as required to handle Crisis events.
• Assume Incident Commander role for Crisis-level incidents per escalation policy.
• Maintain a communication cadence during evolving incidents and crisis events as needed.
• Support operators in compiling situational reports and incident summaries.
• Ensure timely triage, categorization, and prioritization of alerts and cases.
• Provide oversight of incident documentation workflows, proper escalation channels and resolutions.
• Coordinate production and delivery of emergency notification and mass communications.
• Conduct post crisis/incident reviews to identify process improvements.
• Assist in creating, updating, and conducting training material with GSOC Operators.
• Assist in onboarding new GSOC staff and training to include tools, procedures, policies, escalation expectations.

Supervisor – Security Operations Center

• Monitor security alerts and events in the Security Operations Center (SOC) and perform initial triage, analysis, and escalation as needed.
• Investigate potential security incidents using SIEM, endpoint, network, and other security tools to determine scope, impact, and next steps.
• Document findings, actions taken, and incident details clearly and accurately in accordance with SOC procedures and reporting requirements.
• Escalate confirmed or high-risk incidents to senior analysts or incident response teams when appropriate.
• Support threat detection, alert tuning, and ongoing improvement of SOC monitoring processes and playbooks.
• Collaborate with internal teams to gather information, support investigations, and help protect enterprise systems and data.
• Stay current on common cyber threats, vulnerabilities, and attacker tactics, techniques, and procedures (TTPs).

Security Operations jobs in Maryland

See all jobs on JobTailor

IT & Security Operations Analyst

Government Security Operations Center Communications Systems Operator – Liaison

Cybersecurity Operations Consultant

Supervisor – Security Operations Center

SOC Analyst, Tier 1

SOC Analyst – Shift Lead

SOC Analyst, Tier 2