SOC Tier 2 Analyst

Omniscius Consulting; Fort Bragg (NC); On-site; USD 85,000 - 120,000; Full time

Job summary

Omniscius Consulting seeks a SOC Tier 2 Analyst to support the USARC DCOMSS program at Fort Bragg, NC. You will investigate escalated cyber events, correlate telemetry, maintain incident records, and advise on response actions as part of the Blue Team.

Responsibilities include detailed analysis across SIEM/EDR/NetFlow data, coaching Tier 1 analysts, and coordinating with Government personnel. DoD qualification requirements apply, with opportunities for advanced certification and mission-focused

Qualifications

• Minimum 3 years of documented relevant cyber defense experience including SIEM, network traffic analysis, multi-source correlation, and incident documentation.
• DoD Cyber Workforce Framework (DCWF) 511, Cyber Defense Analyst, Intermediate proficiency.
• Meet DoDM 8140.03 qualification requirements for every assigned work role and proficiency through an approved education, training, certification, or authorized experience route.
• Current matrix-listed certification options for 511 Intermediate: CEH(P), Cloud+, FITSP-O, GCED, GDSA, GMON, GRID, GSEC, PenTest+, Security+.

Responsibilities

• Investigate escalated alerts using SIEM, EDR, network data, and host telemetry.
• Develop event timelines, identify affected systems, and assess mission impact.
• Recommend containment and eradication steps to Government personnel and track actions.
• Maintain incident records with evidence and rationale; update portals through closure.
• Review Tier 1 tickets for completeness and coach analysts on investigation quality.
• Escalate complex intrusions to Tier 3; support shifts and exercises as assigned.
• Perform other duties as assigned consistent with responsibilities, clearance, and scope.

Skills

Multi-source correlation

Incident investigation

Evidence preservation

Documentation

Analyst coaching

Education

DoD 8140.03 qualification requirements

511 Intermediate certifications (CEH+, Cloud+, FITSP-O, GCED, GDSA, GMON, GRID, GSEC, PenTest+, Security+)

Tools

SIEM

EDR

NetFlow

Packet capture

IDS/IPS

Incident-management systems

Job description

Our client is seeking a SOC Tier 2 Analyst to support the U.S. Army Reserve Command (USARC) Defensive Cyberspace Operations Mission Support Services (DCOMSS) program at Fort Bragg, North Carolina. Investigate escalated cyber events, correlate multiple telemetry sources, maintain incident records, and recommend response actions. The Tier 2 Analyst provides deeper analysis and quality review within the Blue Team.

Essential Duties and Responsibilities

• Investigate escalated alerts using SIEM, EDR, network flow, packet, firewall, authentication, proxy, and host data.

• Develop event timelines, identify affected systems and indicators, and assess scope and potential mission impact.

• Recommend containment and eradication steps to authorized Government personnel and track approved actions.

• Maintain incident records and required portal updates through closure, with evidence and rationale for decisions.

• Review Tier 1 tickets for completeness and coach analysts on investigation and documentation quality.

• Escalate complex intrusions and suspected advanced activity to Tier 3; support shifts and exercises as assigned.

• Perform other duties as assigned consistent with the position's responsibilities, qualifications, clearance, and authorized scope.

Required Qualifications

Education and Experience

• Minimum 3 years of documented relevant experience. Relevant cyber defense analysis and incident investigation experience, including SIEM, network traffic analysis, multi-source correlation, and incident documentation.

• DoD Cyber Workforce Framework (DCWF) 511, Cyber Defense Analyst, Intermediate proficiency.

• Meet DoDM 8140.03 qualification requirements for every assigned work role and proficiency through an approved education, training, certification, or authorized experience route before independent cyber work. Document work-role appointment and qualification; maintain required residential qualification and continuing learning. A higher-level approved option may qualify the same role at a lower level.

• Current matrix-listed certification options for 511 Intermediate: CEH(P), Cloud+, FITSP-O, GCED, GDSA, GMON, GRID, GSEC, PenTest+, Security+.

Knowledge, Skills and Abilities

• Demonstrated knowledge of Multi-source correlation, network traffic analysis, incident investigation, evidence preservation, and standardized response.

• Proficiency with SIEM, EDR, NetFlow, packet capture, IDS/IPS, and incident-management systems appropriate to assigned duties and approved access.

• Ability to produce accurate records,