SOC Tier 1 Analyst

Omniscius Consulting • Fort Bragg, NC

1d • Onsite

About The Position

The SOC Tier 1 Analyst supports the U.S. Army Reserve Command (USARC) Defensive Cyberspace Operations Mission Support Services (DCOMSS) program at Fort Bragg, North Carolina. This is the first tier of the DCOMSS security operations workflow. During assigned watches, the analyst monitors cyber defense telemetry, triages alerts, documents incidents, and escalates activity requiring deeper investigation.

The role requires relevant cyber defense or network security monitoring experience and qualification for the assigned DoD Cyber Workforce Framework work role. The analyst must meet DoDM 8140.03 qualification requirements through an approved education, training, certification, or authorized experience route before performing independent cyber work, and maintain required qualifications and continuing learning.

Requirements

• At least 1 year of documented relevant experience.
• Relevant cyber defense or network security monitoring experience, including SIEM triage, network traffic analysis, accurate incident records, and shift handoff.
• DoD Cyber Workforce Framework (DCWF) 511, Cyber Defense Analyst, at Intermediate proficiency; basic eligibility is subject to Government confirmation for this position.
• Meet DoDM 8140.03 qualification requirements for every assigned work role and proficiency through an approved education, training, certification, or authorized experience route before independent cyber work.
• Document work-role appointment and qualification; maintain required residential qualification and continuing learning. A higher-level approved option may qualify the same role at a lower level.
• Hold a current matrix-listed certification option for DCWF 511 Intermediate: CEH(P), Cloud+, FITSP-O, GCED, GDSA, GMON, GRID, GSEC, PenTest+, or Security+.
• Demonstrated knowledge of SIEM monitoring, alert triage, network traffic fundamentals, incident documentation, and escalation procedures.
• Proficiency with SIEM, IDS/IPS, EDR, packet or network analysis tools, and Windows and Linux systems appropriate to assigned duties and approved access.
• Ability to produce accurate records, explain findings and decisions, and follow approved procedures and security requirements.
• Strong written and verbal communication skills and sound judgment when coordinating with technical staff and Government stakeholders.
• Strong organizational skills, confidentiality, and ability to work independently and collaboratively in a mission-focused environment.

Nice To Haves

• Experience in a 24/7 security operations center or DoD network environment.
• Relevant DoD or enterprise IT experience with mission tooling and operational reporting.

Responsibilities

• Monitor SIEM alerts, sensor events, host detections, and approved watch queues for suspicious activity.
• Triage events using approved playbooks, correlate basic evidence, and distinguish actionable activity from false positives.
• Create accurate tickets, identify applicable incident categories, preserve supporting artifacts, and maintain timely status updates.
• Escalate events to Tier 2 under documented thresholds and communicate context during shift handoffs.
• Follow approved response procedures and maintain records needed for operational reporting and quality review.
• Support exercises and surge work within assigned qualification, system access, and authority.
• Perform other duties as assigned consistent with the position's responsibilities, qualifications, clearance, and authorized scope.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level
• Education Level: No Education Listed