Tier 1 Watch Analyst

Sentar; Charleston (SC); On-site; USD 70,000 - 110,000; Full time

Benefits offered by this job

Voluntary Medical, Dental, Vision

Voluntary Life & Disability

401(k) match

Generous PTO

Flexible leave programs

Job summary

Sentar is seeking a Tier 1 Analyst in Charleston, SC to monitor and protect data across networks and endpoints. The role requires validating events, initiating incident forms, and handing off to Tier 2 for deeper analysis.

You will perform triage, log review, and participate in 24x7 readiness to support CJCSM 6510.01B reporting. The candidate should understand incident response procedures, packet analysis, IDS/IPS systems, and basic digital forensics, with strong problem-solving and

Qualifications

• Bachelor's degree in Cybersecurity, Computer, Electrical, or Electronics Engineering, or Mathematics with a CS concentration, or equivalent.
• HS diploma/GED with 2+ years of cyber-related experience (T&E/A&A/C&A).
• Knowledge of Incident Response Procedures and CJCSM guidelines.
• Familiarity with network intrusion detection, log analysis, and digital forensics.

Responsibilities

• Identify, isolate, investigate, inform, and implement data protection measures.
• Validate events and determine if they are incidents; log into reporting systems.
• Provide 24x7 incident response support as needed.
• Perform initial alert triage and create tickets for Tier 2 analysis.
• Review host and network logs; use Splunk and related tools for analysis.
• Help tune and whitelist to reduce false positives.
• Contribute to SOPs and operational reports.

Skills

Incident Response

Packet Analysis

IDS/IPS

Host-Based Tools

OS Logging

Log Aggregation

Problem Solving

Verbal & Written Communication

CJCSM 6510.01B

Digital Forensics

Independent Troubleshooting

Education

Bachelors in Cybersecurity/Engineering/Math

HS diploma + 2+ yrs cyber exp

Tools

CJCSM 6510.01B

Job description

Sentar is proud to be an employee-owned company, fostering a culture of empowerment, collaboration, and innovation. Sentar is dedicated to developing the critical talent that the connected world demands to create solutions to address the convergence of cybersecurity, intelligence, analytics, and systems engineering. We invite you to join the team where you can build, innovate, and secure your career.

Sentar is seeking a Tier 1 Analyst in Charleston, SC!

Role Description:

The CSSP DCO Watch Analyst (Tier 1) will identify, isolate, investigate, inform, and implement measures to detect and protect data across a wide spectrum of sources and locations. The Watch Analyst is required to validate suspicious events or reports and determine if the event constitutes an incident. The candidate will ensure incidents are properly entered into the appropriate reporting system and determine the severity of the incident. Reporting and response measures will be taken immediately in order to satisfy the Chairman of the Joint Chiefs of Staff Manual (CJCSM) 6510.01B reporting requirements.

• Compile and maintain internal standard operating procedure (SOP) documentation and ensure associated documentation and capabilities remain compliant with CJCSM 6510.01B and other applicable policy directives.
• Provide endpoint & network intrusion detection and monitoring, correlation analysis, incident response and support for the Cybersecurity Service Provider (CSSP) and its subscriber sites.
• Validate suspicious events or reports and determine if the event constitutes an incident, properly entering associated data into the appropriate reporting systems.
• Perform initial alert triage, document findings against established triage standards, generate initial tickets for suspicious activity, and escalated them to Tier 2 technical personnel for deeper analysis.
• Provide 24x7 support for the CSSP's Incident Response capability during non-core business hours consistent with CSSP requirements as needed.
• Perform preliminary host and network log reviews, explore patterns in network and system activity via log correlation using Splunk and supplemental tools, and assist with data collection and basic artifact gathering during campaigns as directed by higher tiers.
• Identify recurring benign activity to support tuning and whitelisting recommendations that reduce false positives.
• Participate in program reviews, product evaluations, and onsite certification evaluations, and assist with compiling the draft daily operations report on a rotating basis for review and release by the Watch Officer.

Qualifications:

Clearance Level: Secret, with ability to obtain Top Secret/Sensitive Compartmented Information (TS/SCI)

Education: Bachelor's degree in Cybersecurity, Computer, Electrical, or Electronics Engineering, or Mathematics with a concentration in computer science or equivalent OR a high school diploma/GED with 2+ years of practical experience demonstrating competency in Cybersecurity Engineering, Test & Evaluation (T&E) or Assessment & Authorization (A&A)/ Certification & Accreditation (C&A) related field.

Certifications:

• CNDSP Analyst

Experience:

• Knowledge of Incident Response Procedures
• Knowledge of Packet Analysis
• Knowledge of IDS/IPS solutions
• Familiarity with various Host-Based Tools
• Familiarity with various operating system logging
• Experience with Log Aggregation Tools
• Logical thinking and analytical ability
• Verbal and written communication ability
• Knowledge of CJCSM 6510.01B
• Experience with Digital Forensics
• The ability to solve problems independently

Additionally:

• Overtime may be required as needed to support incident response actions (Surge)
• Up to 10% Travel may be required
• Due to the nature of the work required, operations are conducted 24/7/365 across three regional operation centers (ROC). Each ROC works four ten-hour shifts breaking down into front half (Sunday-Wednesday) and back half (Wednesday-Saturday). Choice of shifts will be made available with the understanding that placement is at the discretion of the assigned managers.

Benefits at Sentar:

Our unique employee ownership model attracts top talent, giving employees the freedom to take initiative and drive meaningful improvements. In addition to cultivating a thriving and inclusive work environment, Sentar offers an extensive benefits package designed to support the well‑being of employees and their families. Employee ownership is the foundation of our culture, promoting participation, teamwork, and accountability while ensuring long-term financial security and a commitment to excellence.

• Voluntary Medical, Dental, Vision, with Flexible Spending Plan options
• Voluntary Life, Critical Illness, Accident, and Long Term Care insurance options
• Group Term Life, Short-Term and Long-Term Disability is provided by Sentar to all qualifying employees
• Generous 401(k) match
• Competitive PTO plan that graduates quickly with years of service
• Other leave programs; holiday schedule along with bereavement, maternity, jury and military duty

Sentar is an affirmative Action and Equal Opportunity Employer M/F/Vets/Persons with Disabilities

We want you to build your career at Sentar, so if you are an individual with a disability and require a reasonable workplace accommodation applying for a job or at any point in the employment process, contact the Recruiting Manager at [e-mail] . Please indicate the specifics of the assistance needed. Thank you for considering Sentar in your employment search.

Build, Innovate, Secure Your Career at Sentar.