Onsite 24/7 SOC Analyst Tier I – Real-Time Defense

Indigo IT LLC; Fort Bragg (NC); On-site; USD 70,000 - 95,000; Full time

Benefits offered by this job

Medical, Dental, Vision

401(k) with company match

Paid Time Off

Paid holidays

Education assistance

Job summary

Indigo IT LLC seeks Tier 1 Watch Analysts to provide real-time monitoring and triage for a 24/7/365 blue team operation at Fort Bragg, NC. Onsite shifts include evenings, nights, weekends, and holidays, with strict adherence to playbooks and incident response procedures.

Applicants must possess a Bachelor's degree and 4+ years of experience, DoD 8140.03 qualification for DCWF 511, and US citizenship with a current DoD SECRET clearance. A CAC and base access are required.

Qualifications

• Bachelor's degree with 4+ years of experience required.
• DoD 8140.03 qualification required for solo watch.
• US citizenship and DoD SECRET clearance required.
• Ability to obtain DoD CAC and installation access; security training completed.

Responsibilities

• Monitor SIEM alerts, sensor events, and host-based detections in real time.
• Perform initial event triage, ticket creation, and category assignment; reject obvious false positives.
• Elevate qualifying events to Tier 2 while following SOP timelines; hand off at shift changes.
• Maintain pass-down logs and complete required training on schedule.

Skills

SIEM triage

TCP/IP networking

Windows

Linux fundamentals

Written communication

On-site shift flexibility

Incident reporting

Education

Bachelor's degree

DoD 8140.03 qualification

US Citizenship

DoD SECRET clearance

Tools

Enterprise SIEM

CJCSM 6510.01B playbooks

Access control systems

Job description

Indigo IT LLC seeks Tier 1 Watch Analysts to provide real-time monitoring and triage for a 24/7/365 blue team operation at Fort Bragg, NC. Onsite shifts include evenings, nights, weekends, and holidays, with strict adherence to playbooks and incident response procedures.

Applicants must possess a Bachelor's degree and 4+ years of experience, DoD 8140.03 qualification for DCWF 511, and US citizenship with a current DoD SECRET clearance. A CAC and base access are required.