SOC Tier II Analyst — Advanced Incident Response

Strategic Operational Solutions, Inc; Fort Bragg (NC); On-site; USD 85,000 - 125,000; Full time

Job summary

Strategic Operational Solutions, Inc. (STOPSO) is seeking a SOC Tier 2 Analyst to support the USARC DCOMSS program at Fort Bragg, NC. The role involves investigating escalated cyber events, correlating telemetry sources, maintaining incident records, and recommending response actions.

The ideal candidate has at least 3 years of cyber defense experience, DoD-specific certifications, and SECRET clearance. On-site work in a secure government facility is required, with occasional after-hours support

Qualifications

• Minimum 3 years of documented relevant experience in cyber defense analysis and incident investigation.
• DoD Cyber Workforce Framework 511 – Intermediate proficiency required.
• Meet DoDM 8140.03 qualification requirements before independent cyber work.
• Current 511 Intermediate certifications (CEH(P), Cloud+, FITSP-O, GCED, GDSA, GMON, GRID, GSEC, PenTest+, Security+).

Responsibilities

• Investigate escalated alerts using SIEM, EDR, NetFlow, packet capture, and related data.
• Develop event timelines, identify affected systems, and assess mission impact.
• Recommend containment and eradication steps to Government personnel.
• Maintain incident records and portal updates through closure with evidence and rationale.
• Coach Tier 1 analysts and review investigations for quality.
• Escalate complex intrusions to Tier 3 and support shifts and exercises.

Skills

SIEM proficiency

EDR proficiency

NetFlow analysis

Incident investigation

Multi-source correlation

Evidence preservation

Communication skills

Education

DCWF 511 Intermediate

Tools

SIEM

EDR

NetFlow

Packet capture

IDS/IPS

Incident-management systems

Job description

Strategic Operational Solutions, Inc. (STOPSO) is seeking a SOC Tier 2 Analyst to support the USARC DCOMSS program at Fort Bragg, NC. The role involves investigating escalated cyber events, correlating telemetry sources, maintaining incident records, and recommending response actions.

The ideal candidate has at least 3 years of cyber defense experience, DoD-specific certifications, and SECRET clearance. On-site work in a secure government facility is required, with occasional after-hours support