SOC Analyst

STOPSO; Fayetteville (NC); On-site; USD 65,000 - 85,000; Full time

Job summary

Strategic Operational Solutions (STOPSO) is seeking a SOC Tier 1 Analyst to support the USARC DCOMSS program at Fort Bragg, NC. Responsibilities include monitoring SIEM, triaging alerts, and creating tickets while escalating to Tier 2 as needed.

The role requires DoD DCWF 511 proficiency and DoD 8140 qualifications, with experience in SIEM/EDR tools and network analysis. Strong communication and teamwork are essential in a 24/7 operation.

Qualifications

• Minimum 1 year of documented relevant experience in cyber defense or network security monitoring.
• Be eligible for DoD 8140 qualifications and DoD 511 intermediate level certification options.
• Proficient with SIEM triage, network traffic analysis, and incident record keeping.
• Ability to work shift handoffs and coordinate with Government stakeholders.

Responsibilities

• Monitor SIEM alerts, sensor events, host detections, and watch queues.
• Triage events using playbooks and distinguish actionable activity from false positives.
• Create accurate tickets, preserve artifacts, and maintain timely status updates.
• Escalate events to Tier 2 and communicate context during handoffs.
• Follow approved response procedures and maintain records for reporting.
• Support exercises and surge work within qualification and authorities.

Skills

SIEM monitoring

Incident documentation

Escalation procedures

Windows systems

Linux systems

Communication skills

Education

DoD 8140/ DoD 8140.03 qualification

DCWF 511 Cyber Defense Analyst

Tools

SIEM tools

IDS/IPS

EDR tools

Network analysis tools

Job description

Strategic Operational Solutions (STOPSO) is seeking a SOC Tier 1 Analyst to support the U.S. Army Reserve Command (USARC) Defensive Cyberspace Operations Mission Support Services (DCOMSS) program at Fort Bragg, North Carolina. Monitor cyber defense telemetry during assigned watches, triage alerts, document incidents, and escalating activity that requires deeper investigation. This is the first tier of the DCOMSS security operations workflow.

Duties And Responsibilities

• Monitor SIEM alerts, sensor events, host detections, and approved watch queues for suspicious activity.
• Triage events using approved playbooks, correlate basic evidence, and distinguish actionable activity from false positives.
• Create accurate tickets, identify applicable incident categories, preserve supporting artifacts, and maintain timely status updates.
• Escalate events to Tier 2 under documented thresholds and communicate context during shift handoffs.
• Follow approved response procedures and maintain records needed for operational reporting and quality review.
• Support exercises and surge work within assigned qualification, system access, and authority.
• Perform other duties as assigned consistent with the position's responsibilities, qualifications, clearance, and authorized scope.

Qualifications:

• Minimum 1 years of documented relevant experience. Relevant cyber defense or network security monitoring experience; SIEM triage, network traffic analysis, accurate incident records, and shift handoff.
• DoD Cyber Workforce Framework (DCWF) 511, Cyber Defense Analyst. Recruit for Intermediate proficiency; Basic eligibility is subject to Government confirmation for this position.
• Meet DoDM 8140.03 qualification requirements for every assigned work role and proficiency through an approved education, training, certification, or authorized experience route before independent cyber work. Document work-role appointment and qualification; maintain required residential qualification and continuing learning. A higher-level approved option may qualify the same role at a lower level.
• Current matrix-listed certification options for 511 Intermediate: CEH(P), Cloud+, FITSP-O, GCED, GDSA, GMON, GRID, GSEC, PenTest+, Security+.

Required Skills

• Demonstrated knowledge of SIEM monitoring, alert triage, network traffic fundamentals, incident documentation, and escalation procedures.
• Proficiency with SIEM, IDS/IPS, EDR, packet or network analysis tools, and Windows and Linux systems appropriate to assigned duties and approved access.
• Ability to produce accurate records, explain findings and decisions, and follow approved procedures and security requirements.
• Strong written and verbal communication skills and sound judgment when coordinating with technical staff and Government stakeholders.
• Strong organizational skills, confidentiality, and ability to work independently and collaboratively in a mission-focused environment.

Preferred Skills

• Experience in a 24/7 security operations center or DoD network environment.
• Relevant DoD or enterprise IT experience with mission tooling and operational reporting.

Equal Employment Opportunity

STOPSO is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, disability, veteran status, genetic information, or any other characteristic protected by applicable federal, state, or local law.