> Markdown version of [/jobs/ext/3086819-soc-analyst-tier-i](https://www.wearedevelopers.com/jobs/ext/3086819-soc-analyst-tier-i). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # SOC Analyst, Tier I - **Company:** Indigo It - **Location:** Fort Liberty, NC, United States - **Experience:** Experienced - **Salary:** $60,000.0 - $87,000.0 - **Contract:** Contract - **Skills:** Microsoft Windows, Cloud Computing, Cyber Security, Computer Networks, Information Technology Consulting, Linux, Knowledge Management, Network Security, NIPRNet, Security Information and Event Management, Transmission Control Protocol (TCP), Cyber Threat Analysis, Firewalls (Computer Science), 3-tier Architectures, Cyber Warfare, Blue Team (Cyber Security) - **Published:** September 26, 2026 - **Apply:** https://diversityjobs.com/main/sendform/8/8/28176/1/18446874?backUrl=%2Fcareer%2F18446874%2FSoc-Analyst-Tier-I-North-Carolina-Fort-Bragg ## About the Role * Bachelor's degree and 4 years of experience * DoDM 8140.03 qualification for DCWF 511 Cyber Defense Analyst at Intermediate proficiency is required for any individual assigned solo watch, regardless of labor category level * Favorably adjudicated Tier 3 investigation; Tier 5 required prior to any privileged access * US Citizenship required * Current DoD SECRET clearance required (interim SECRET acceptable at start; final SECRET required within 120 days of award) * Ability to obtain and maintain a DoD Common Access Card and USARC installation access * Completion of DoD Cyber Awareness training prior to system access and annually thereafter; AT Level I, OPSEC Level I, TARP, and CUI training within 30 days of start SPECIFIC KNOWLEDGE, SKILLS, & ABILITIES: * Demonstrated ability to triage alerts using SIEM searches, packet/network traffic, and host logs; distinguish likely malicious activity from false positives; and escalate accurately while standing solo watch * Ability to operate an enterprise SIEM console and follow documented playbooks accurately under time pressure * Working familiarity with TCP/IP networking, Windows and Linux fundamentals, and common log sources (proxy, firewall, host audit logs) * Reliability and discipline to stand solo overnight and weekend watches and to execute complete, accurate handoffs * Clear written communication for tickets, pass-down entries, and escalations * Working knowledge of CJCSM 6510.01B incident categories and DoD/Army cyber incident reporting requirements * Excellent interpersonal and written communication skills to interact effectively with Government stakeholders, ARCYBER and Regional Cyber Center counterparts, and team members * The ability to communicate complex technical findings clearly to non-technical audiences * A willingness to uncover, document, and communicate deviations from planned outcomes in order to improve processes and prevent recurrence * A passion for continuous learning and a commitment to stay current with emerging threats, adversary tradecraft, and defensive technologies ## Description Founded in 2001, Indigo IT is an award-winning information technology consulting and services company. We are a trusted services provider to government agencies seeking innovative Cloud, Cybersecurity, Knowledge Management, and Enterprise solutions. We know our defense, federal, and civilian customers have critical IT infrastructures that must remain reliable, available, and maximized. Indigo IT is mission focused and committed to maintaining a sense of urgency in anticipating and supporting our customers' technology goals and objectives. Our unique ability to think beyond today allows our clients to stay ahead of their IT challenges. As a Veteran-Friendly employer, we are proudly partnered with the Virginia Values Veterans (V3) Program, and a recipient of the HIRE Vets Gold Medallion Award, which recognizes our commitment to recruiting our nation's Veterans. Recognized on the Inc. 5000 list of America's fastest growing companies in 2020 & 2021 and named as one of the 2022 Best Places to Work in Virginia, we are always looking to hire top talent in the field - come join us today! The USARC Defensive Cyberspace Operations Mission Support Services (DCOMSS) program establishes a dedicated, 24/7/365 cyber defense capability for the U.S. Army Reserve Command CIO/G-6, operating as a Cyber Security Service Provider - Executor (CSSP-E). The team performs continuous network security monitoring, detection, analysis, and incident response across NIPRNet and SIPRNet; integrated assessments under the Computer Defense Assistance Program (Network Assistance Visits, Network Damage Assessments, and web assessments); and Cyber Threat Intelligence collection, correlation, signature development, and finished intelligence production in support of approximately 205,000 Army Reserve personnel. We are seeking Tier 1 Watch Analysts to provide real-time monitoring and triage on the 24/7/365 Blue Team watch. Tier 1 analysts are frequently the sole on-site analyst during evening, night, weekend, and holiday watches and must be fully qualified to stand solo watch, detect high-fidelity alerts within the 15-minute standard, and escalate to the on-call Tier 2/Tier 3 chain. ESSENTIAL FUNCTIONS/RESPONSIBILITIES: Real-Time Monitoring and Triage * Stand assigned watch periods on the approved 24/7/365 rotation, including solo evening, night, weekend, and holiday watches * Continuously monitor SIEM alerts, sensor events, and host-based detections; acknowledge high-fidelity alerts within the 15-minute mean-time-to-detect standard * Perform initial event triage, ticket creation, and CJCSM 6510.01B category assignment; reject obvious false positives using documented playbooks Escalation and Handoff * Execute approved Tier 1 playbook actions only; escalate events that meet documented thresholds to Tier 2 within SOP timelines * Recognize and immediately escalate indicators of active adversary presence, data spills, or conditions affecting safety of life or critical mission systems * Maintain the pass-down log and deliver the verbal handoff briefing at every shift change; re-confirm the status of critical incidents until closure Records and Training * Support incident record accuracy and portal currency under Tier 2 direction * Participate in monthly internal DCO training and complete all required annual training on schedule * Do not independently perform Tier 3 analysis, unapproved containment actions, or assessment activity ## Related Videos - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) - [Discover the open source trio you didn’t expect: .NET and PostgreSQL on Linux](https://www.wearedevelopers.com/videos/2042-discover-the-open-source-trio-you-didn-t-expect-net-and-postgresql-on-linux) ## Related Articles - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)