Experience:
3+ years of relevant experience
Anticipated annual salary ranges by level are:
Junior:
$68,000-87,000
Mid-Level:
$81,000-107,000
Join Via Logic supporting U.S. Customs and Border Protection cybersecurity operations. As an Operations Enhancement Analyst, you'll help strengthen and mature Security Operations Center capabilities by identifying opportunities to improve processes, automation, security tooling, detection, and operational visibility.
You'll work alongside cybersecurity and government teams to improve how security operations are performed—from automating workflows and refining playbooks to tuning security tools, developing security content, and measuring whether operational improvements are delivering results.
This posting covers both Junior and Mid-Level Operations Enhancement Analyst openings. Both levels have a 3+ year hiring threshold for these openings. We'll consider the depth and relevance of your experience against the available positions to determine the appropriate level.
Eligibility & Clearance Requirements
Due to CBP requirements, applicants must:
Be a U.S. citizen.
Be able to obtain and maintain the required CBP High Trust background investigation and suitability determination for access to government facilities and systems.
Be available to work primarily onsite at a government site in Ashburn, VA. Specific worksite and travel expectations will be confirmed for the assignment.
Your Mission
Support the continuous improvement and maturation of Security Operations Center processes, capabilities, and visibility.
Help develop, improve, and maintain security operations processes, playbooks, work instructions, and operational workflows.
Author and maintain automation scripts and workflows within Security Orchestration, Automation, and Response (SOAR) platforms.
Troubleshoot and resolve issues involving SOAR code, integrations, workflows, and supporting infrastructure.
Help define and track operational metrics, statistics, and key performance indicators (KPIs) to measure the effectiveness of automation and security-tool tuning.
Identify gaps in detection capabilities and contribute strategies and recommendations for improving detection of attacker tactics, techniques, and behaviors.
Support baselining of enterprise activity to help distinguish normal from abnormal behavior.
Recommend improvements to event-monitoring policies, indicators, and alerts across technologies such as SIEM, firewalls, IDS, cloud services, email, DLP, and EDR.
Draft, test, modify, and maintain security content, including signatures and alerts used by security monitoring technologies.
Support configuration, tuning, maintenance, and policy management for network, endpoint, and mobile security tools.
Review security-tool policies for outdated rules, signatures, and blocks and recommend appropriate updates.
Research and test new tools, technologies, and techniques that may improve operational efficiency or enterprise visibility.
Help communicate newly created or updated security content to the teams that use it.
What You Bring to the Expedition
- 3+ years of relevant professional experience supporting cybersecurity, security operations, security engineering, automation, or a related technical area.
- Experience analyzing operational or technical processes and identifying opportunities to improve effectiveness, efficiency, or visibility.
- Familiarity with Security Operations Center processes and technologies used for monitoring, detection, and response.
- Experience developing or maintaining technical documentation such as playbooks, workflows, work instructions, or Standard Operating Procedures.
- Ability to analyze technical information, troubleshoot issues, and translate findings into practical recommendations.
- Ability to communicate technical findings clearly and collaborate with security analysts, engineers, government partners, and other technical teams.
We are considering candidates at two levels:
Junior - 3+ years:
You bring relevant cybersecurity or security operations experience and can contribute to process improvement, technical documentation, security tooling, automation, or detection-related activities with guidance from more experienced team members.
Mid-Level - 3+ years:
You bring demonstrated depth in relevant cybersecurity operations and can independently contribute to operational improvements, technical problem-solving, security-tool enhancement, automation, or detection-related work.
Preferred qualifications:
- A bachelor's degree in Computer Science, Cybersecurity, Information Technology, Engineering, or a related field.
- Hands-on experience with SOAR platforms, automation workflows, or scripting.
- Experience with SIEM, EDR, IDS, DLP, firewall, cloud-security, or related security technologies.
- Experience creating, modifying, testing, or tuning security alerts, signatures, detection content, or monitoring policies.
- Experience defining, tracking, and reporting operational metrics and KPIs.
- Experience researching, testing, or evaluating cybersecurity tools and technologies.
- Your Route Into Via Logic
- One posting, two experience levels. Tell us about the cybersecurity operations you've supported and the improvements you've helped make—whether through automation, process improvement, detection engineering, security-tool tuning, documentation, or operational analysis.
- Why Explorers Stay
- Healthcare coverage and paid time off that give you room to take care of life outside work.
- Teammates who share knowledge, pitch in, and help each other grow.
- Opportunities to deepen your specialty and explore adjacent areas of cybersecurity as new assignments open up.
- Meaningful work improving cybersecurity capabilities that support a federal mission.
- How We Work
- These positions work primarily onsite at a government site in Ashburn, VA. Specific worksite and travel expectations will be confirmed for the assignment.
- You'll collaborate with Via Logic teammates, government partners, security analysts, engineers, and other technical teams using tools approved for your work environment.
- Core task coverage is generally weekdays, 8:30 a.m.–5:00 p.m. Eastern Time, with on-call support requirements based on assignment needs. We'll discuss specific scheduling expectations before moving forward.
- When virtual meetings are part of the work, we expect active participation and use video when appropriate and permitted by the client environment.
About Via Logic
Via Logic LLC is an information technology partner supporting mission-driven work across DevSecOps, cloud engineering, cybersecurity, data science, and national security analytics for federal and commercial clients. Our teams help modernize complex systems through automation, secure engineering practices, cloud-native technologies, and scalable infrastructure solutions that support real-world impact. But beyond the work itself, we care deeply about how we work.
We believe great teams are built through collaboration, curiosity, accountability, and trust. Whether you're supporting customer missions, strengthening business operations, or leading expeditions of your own, Via Logic is a place where Explorers are encouraged to grow, contribute, and continuously evolve.
Equal Opportunity Employer
We believe different perspectives strengthen teams, improve innovation, and help us build better solutions for the missions we support.
Accessibility & Accommodations
Via Logic is committed to providing an accessible and inclusive hiring experience for all candidates. Reasonable accommodations are available throughout the application and interview process to support accessibility needs and ensure every candidate has an equitable opportunity to explore a career with our team.
Recruiting Fraud Notice
Via Logic takes recruiting fraud seriously. We will never ask candidates for payment, banking information, cryptocurrency, gift cards, or other personal financial information during any stage of the hiring process. All legitimate communication from our team will come directly from authorized Via Logic representatives using official company channels. Due to the rise of fraudulent recruiting activity across the industry, we encourage candidates to use caution if something feels unusual, rushed, or too good to be true.
Real adventures should involve solving meaningful challenges - not wiring money to strangers pretending to be recruiters on the internet. If you have concerns about the legitimacy of a communication claiming to represent Via Logic, please verify the information through our official website before sharing personal information or taking further action.
