DCO Watch Analyst - Tier 1

3 Reasons Consulting
Charleston, United States of America
14 days ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Working hours
Shift work
Languages
English
Experience level
Intermediate

Job location

Charleston, United States of America

Tech stack

Digital Forensics
Intrusion Detection Systems
Network Monitoring
Cybercrime
Cyber Warfare
Splunk

Job description

We are seeking Defensive Cyber Operations (DCO) Analysts at the Tier 1 level to support a 24/7 mission-critical cyber defense environment. Analysts are responsible for monitoring, analyzing, and responding to cybersecurity events and incidents in accordance with CJCSM 6510.01B and applicable Department of Defense (DoD) directives. The appropriate tier will be determined based on candidate qualifications, experience, certifications, and mission requirements., * Monitor network and host-based systems for suspicious activity using approved tools and SOPs.

  • Validate security events and escalate potential incidents to Tier 2 analysts per CJCSM 6510.01B.
  • Enter and maintain accurate incident data in designated reporting systems.
  • Assist with incident documentation and tracking under supervision.
  • Perform basic log correlation using tools such as Splunk, Elastic, or Sentinel.
  • Support 24/7 watch operations and shift turnovers across multiple ROCs.

Requirements

Minimum Security Clearance: Secret, with ability to obtain Top Secret/Sensitive Compartmented Information (TS/SCI) eCRAFT: CSE1 Education: Bachelor's preferred Years of Experience: 3 or more, * Bachelor's degree in a relevant technical discipline, OR

  • IAT Level II certification plus 3 years of recent specialized experience

Required Certifications

  • Must meet DoD 8570 IAT Level II requirements
  • Must obtain and maintain role-based certifications per DoD standards

Desired Qualifications

  • Experience with log aggregation and analysis tools (Splunk, Elastic, Sentinel)
  • Experience with IDS/IPS, host-based, and OS logging solutions
  • Familiarity with incident response methodologies and CJCSM 6510.01B
  • Digital forensics and threat hunting experience
  • Strong analytical, problem-solving, and attention-to-detail skills
  • Effective written and verbal communication skills
  • Ability to work independently and as part of a 24/7 operations team

Benefits & conditions

401(k), Health insurance, 401(k) matching, Vision insurance, Dental insurance, Flexible spending account, Life insurance, Disability insurance 4x10, Overtime, 10 hour shift, * Four 10-hour shifts per ROC (Sunday-Wednesday or Wednesday-Saturday)

  • Shift assignment at the manager's discretion
  • Overtime or surge support may be required during incident response
  • Up to 10% travel may be required

Benefits at 3 Reasons Consulting At 3 Reasons Consulting, we are committed to supporting the well-being of our team with a comprehensive benefits package that includes both company-paid and shared-cost options. Our benefits are designed to enhance your health, financial security, and work-life balance to help you thrive personally and professionally as a valued member of our team.

Company-Paid Benefits

  • Short/Long Term Disability
  • Basic Life Insurance
  • Direct Payroll Deposit
  • Leave Accrual
  • Holidays
  • 401(k) Match

Employee / Company Shared Benefits

  • Additional (Voluntary) Life Insurance
  • 401(k)
  • Medical Coverage
  • Dental Coverage
  • Vision Care Plan
  • Flexible Spending Account Plan

Apply for this position