DCO Watch Analyst - Tier 1

3 Reasons Consulting•Charleston, SC

About The Position

We are seeking Defensive Cyber Operations (DCO) Analysts at the Tier 1 level to support a 24/7 mission-critical cyber defense environment. Analysts are responsible for monitoring, analyzing, and responding to cybersecurity events and incidents in accordance with CJCSM 6510.01B and applicable Department of Defense (DoD) directives. The appropriate tier will be determined based on candidate qualifications, experience, certifications, and mission requirements.

Requirements

Bachelor’s degree in a relevant technical discipline, OR IAT Level II certification plus 3 years of recent specialized experience
Must meet DoD 8570 IAT Level II requirements
Must obtain and maintain role-based certifications per DoD standards
Minimum Security Clearance: Secret, with ability to obtain Top Secret/Sensitive Compartmented Information (TS/SCI)

Nice To Haves

Experience with log aggregation and analysis tools (Splunk, Elastic, Sentinel)
Experience with IDS/IPS, host-based, and OS logging solutions
Familiarity with incident response methodologies and CJCSM 6510.01B
Digital forensics and threat hunting experience
Strong analytical, problem-solving, and attention-to-detail skills
Effective written and verbal communication skills
Ability to work independently and as part of a 24/7 operations team

Responsibilities

Monitor network and host-based systems for suspicious activity using approved tools and SOPs.
Validate security events and escalate potential incidents to Tier 2 analysts per CJCSM 6510.01B.
Enter and maintain accurate incident data in designated reporting systems.
Assist with incident documentation and tracking under supervision.
Perform basic log correlation using tools such as Splunk, Elastic, or Sentinel.
Support 24/7 watch operations and shift turnovers across multiple ROCs.