Blue Team Tier 2 Watch Analyst - Incident Response

Sentar; United States; On-site; USD 95,000 - 125,000; Full time

Benefits offered by this job

Employee ownership

401k match

PTO & holidays

Tuition reimbursement

Professional development

Job summary

Sentar seeks a Tier 2 Watch Analyst at Fort Bragg to join the 24/7 Blue Team. The role spans investigation and correlation across SIEM, EDR, and network telemetry, owning incidents to closure and coordinating containment actions as needed.

You will work rotating shifts on site, conduct initial data captures, preserve chain of custody, and support ongoing hunts and exercises while reporting findings to stakeholders.

Qualifications

• DoD 814003 qualified for DCWF 511/531, intermediate level.
• 5+ years in a DoD/enterprise SOC or similar role.
• Familiarity with multi-source investigation and correlation.

Responsibilities

• Stand watch 24/7 rotating shifts and perform Tier 1/2 duties.
• Correlate anomalous activity across SIEM and telemetry sources.
• Own incident records through closure with proper reporting.
• Provide quality control and contribute to weekly/monthly reports.

Skills

DoD 814003

Elastic SIEM

Incident response

CJCSM 651001B

IR coordination

Education

Bachelor's degree

AA with experience

Tools

Elastic

EDR tools

Job description

Sentar seeks a Tier 2 Watch Analyst at Fort Bragg to join the 24/7 Blue Team. The role spans investigation and correlation across SIEM, EDR, and network telemetry, owning incidents to closure and coordinating containment actions as needed.

You will work rotating shifts on site, conduct initial data captures, preserve chain of custody, and support ongoing hunts and exercises while reporting findings to stakeholders.