SOC Tier 2 Analyst

Omniscius Consulting • Fort Bragg, NC

1d • Onsite

About The Position

The SOC Tier 2 Analyst supports the U.S. Army Reserve Command (USARC) Defensive Cyberspace Operations Mission Support Services (DCOMSS) program at Fort Bragg, North Carolina. The role provides deeper analysis and quality review within the Blue Team by investigating escalated cyber events, correlating multiple telemetry sources, maintaining incident records, and recommending response actions.

The analyst investigates escalated alerts, develops event timelines, identifies affected systems and indicators, and assesses scope and potential mission impact. The analyst recommends containment and eradication steps to authorized Government personnel, tracks approved actions, and maintains incident records and required portal updates through closure. The role also reviews Tier 1 tickets and coaches analysts on investigation and documentation quality, while escalating complex intrusions and suspected advanced activity to Tier 3. Shifts and exercises may be supported as assigned.

Requirements

• Minimum 3 years of documented relevant experience.
• Relevant cyber defense analysis and incident investigation experience, including SIEM, network traffic analysis, multi-source correlation, and incident documentation.
• DoD Cyber Workforce Framework (DCWF) 511, Cyber Defense Analyst, Intermediate proficiency.
• Meet DoDM 8140.03 qualification requirements for every assigned work role and proficiency through an approved education, training, certification, or authorized experience route before independent cyber work.
• Document work-role appointment and qualification; maintain required residential qualification and continuing learning.
• Demonstrated knowledge of multi-source correlation, network traffic analysis, incident investigation, evidence preservation, and standardized response.
• Proficiency with SIEM, EDR, NetFlow, packet capture, IDS/IPS, and incident-management systems appropriate to assigned duties and approved access.
• Ability to produce accurate records.
• Hold a current matrix-listed certification option for DCWF 511 Intermediate: CEH(P), Cloud+, FITSP-O, GCED, GDSA, GMON, GRID, GSEC, PenTest+, or Security+.

Responsibilities

• Investigate escalated alerts using SIEM, EDR, network flow, packet, firewall, authentication, proxy, and host data.
• Develop event timelines, identify affected systems and indicators, and assess scope and potential mission impact.
• Recommend containment and eradication steps to authorized Government personnel and track approved actions.
• Maintain incident records and required portal updates through closure, including evidence and rationale for decisions.
• Review Tier 1 tickets for completeness and coach analysts on investigation and documentation quality.
• Escalate complex intrusions and suspected advanced activity to Tier 3.
• Support shifts and exercises as assigned.
• Perform other duties consistent with the position's responsibilities, qualifications, clearance, and authorized scope.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed