SOC Analyst II — 24/7 Incident Response (Fort Bragg)

Indigo IT, LLC; Fort Bragg (NC); On-site; USD 80,000 - 110,000; Full time

Benefits offered by this job

Medical, Dental, Vision coverage

401(k) with company match

Life and disability insurance

FSA

Job summary

Indigo IT, LLC in Fort Bragg, NC, seeks a Tier II SOC Analyst to join the 24/7 Blue Team for the USARC DCOMSS mission. You will own incident records from creation through closure, perform multi-source correlation, and recommend containment actions to the Blue Team Lead.

The role requires DoD/enterprise SOC experience, Elastic SIEM proficiency, and the ability to work rotating shifts onsite at Fort Bragg. U.S. citizenship and SECRET clearance are required.

Qualifications

• Bachelor's degree and 5 years of experience.
• DoDM 8140.03 Intermediate qualification for DCWF 511 Cyber Defense Analyst.
• DoDM 8140.03 qualification for DCWF 531 Cyber Defense Incident Responder when assigned.
• US Citizenship and DoD SECRET clearance required.

Responsibilities

• Stand watch in 24/7/365 rotation performing Tier 1/2 tasks.
• Correlate activity across SIEM, EDR, PCAP, NetFlow, and IDS/IPS.
• Own incident records through closure and coordinate containment actions.
• Quality-control Tier 1 tickets and contribute to weekly/monthly reports.

Skills

DoD/enterprise SOC experience

Elastic SIEM

EDR (Trellix)

PCAP/NetFlow/IDS-IPS

MITRE ATT&CK

Windows/Linux/macOS

Scripting for triage

Education

Bachelor's degree

Tools

Elastic SIEM

Trellix ENS

Tychon EDR

Wireshark

NetFlow

Job description

Indigo IT, LLC in Fort Bragg, NC, seeks a Tier II SOC Analyst to join the 24/7 Blue Team for the USARC DCOMSS mission. You will own incident records from creation through closure, perform multi-source correlation, and recommend containment actions to the Blue Team Lead.

The role requires DoD/enterprise SOC experience, Elastic SIEM proficiency, and the ability to work rotating shifts onsite at Fort Bragg. U.S. citizenship and SECRET clearance are required.