SITEC - Cyber Defense Incident Responder (JNY)- Fort Bragg, NC

Peraton•Fort Bragg, NC

2d•Onsite

About The Position

Peraton is hiring a Journeyman Cyber Security Analyst to support the Special Operations Command Information Technology Enterprise Contract (SITEC) 3 Enterprise Operations and Maintenance Task Order at Fort Bragg, North Carolina. The contract provides USSOCOM, its Component Commands, Theater Special Operations Commands, and deployed forces with operations and maintenance services, including network operations, systems and network infrastructure maintenance, end-user and common-device support, configuration and asset management, training, and install, move, add, and change services. The role supports a 24/7 security operations center and helps defend systems critical to USSOCOM’s global mission. The analyst identifies and analyzes threats using SIEM platforms, intrusion detection systems, and other tools; correlates data to detect advanced persistent threats and complex attack patterns; and improves detection rules and alerts. The position also leads high-priority incident response, conducts root-cause analysis, prepares post-incident reports, contributes to audits and assessments, and recommends improvements to security, compliance, and SOC operations. The analyst mentors junior team members, collaborates with SOC colleagues, IT staff, and stakeholders, researches emerging threats and technologies, and delivers training. The role handles sensitive and classified information in accordance with DoD and USSOCOM requirements. The position is based at Fort Bragg, NC and follows a rotating 12-hour shift schedule totaling 80 hours per two-week pay period. The weekly schedule is Sunday–Wednesday or Wednesday–Saturday, consisting of three 12-hour shifts or three 12-hour shifts and one 8-hour shift. Nights, weekends, and holidays may be required.

Requirements

Master’s degree with 0 or more years of experience, bachelor’s degree with 2 or more years, high school diploma with 6 or more years, or associate degree with 4 or more years.
DoD Top Secret clearance with Sensitive Compartmented Information (SCI) access.
DoW 8140 compliance under Work Role Code 532, Cyber Defense Incident Responder, at Intermediate level or higher.
Strong understanding of cybersecurity concepts, including threat detection, malware analysis, and network security.
Proficiency with one or more of the following: SIEM platforms, IDS/IPS, endpoint protection solutions, or forensic analysis tools.
Advanced analytical and problem-solving skills, including the ability to handle complex incidents and scenarios.
Effective communication skills, including creating detailed reports and briefing stakeholders.
Ability to work independently and lead initiatives in a fast-paced, team-oriented environment.
Willingness to work a rotating 12-hour shift schedule totaling 80 hours per two-week pay period, with weekly schedules of Sunday–Wednesday or Wednesday–Saturday.
Ability to work nights, weekends, and holidays as required.
Ability to handle sensitive and classified information in compliance with DoD and USSOCOM requirements.

Nice To Haves

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field, or equivalent experience.
Advanced certifications such as CISSP, GIAC certifications (for example, GCIA or GCIH), or OSCP.
Experience with scripting or automation tools such as Python or PowerShell, and threat hunting techniques.
Knowledge of advanced threat intelligence platforms and methodologies.

Responsibilities

Identify and analyze sophisticated threats using SIEM platforms, intrusion detection systems, and other advanced tools.
Correlate information from multiple sources to uncover advanced persistent threats and complex attack patterns.
Refine detection rules and alerts to improve threat identification.
Lead high-priority security incident response, coordinating containment, eradication, and recovery.
Conduct root-cause analysis and provide actionable recommendations for future mitigation.
Prepare detailed post-incident reports to inform organizational strategy and resilience.
Lead audits and assessments and recommend improvements to compliance and processes.
Help secure network operations, systems, and network infrastructure against evolving threats.
Mentor junior analysts and support their technical development.
Collaborate with SOC team members, IT staff, and stakeholders to coordinate threat responses.
Contribute to cross-functional discussions and improvements in SOC operations.
Research emerging threats, technologies, and best practices, and recommend tools, techniques, and strategies.
Deliver training sessions to improve team knowledge and preparedness.
Operate in a 24/7 SOC environment and handle sensitive and classified information in accordance with DoD and USSOCOM requirements.