Sentar is proud to be an employee-owned company, fostering a culture of empowerment, collaboration, and innovation. Sentar is dedicated to developing the critical talent that the connected world demands to create solutions to address the convergence of cybersecurity, intelligence, analytics, and systems engineering. We invite you to join the team where you can build, innovate, and secure your career.
Sentar is seeking a Tier 2 Watch Analyst in Ft. Bragg, NC to serve as the investigation and correlation layer of the 24/7/365 Blue Team watch. Tier 2 analysts stand watch on the rotation, own incident records from creation through closure, perform multi-source correlation, recommend containment and eradication actions, and quality-control Tier 1 work before closure.
Role DescriptionWatch Operations
Investigation and Correlation* Correlate anomalous activity across SIEM (Elastic), Trellix ENS, Tychon EDR, full packet capture, NetFlow, IDS/IPS, proxy, router/firewall syslog, and boundary-device telemetry to characterize event scope * Escalate suspected APT activity, complex intrusions, and uncertain containment to the Blue Team Lead (Tier 3) without delay
Incident Handling and Response* Own incident records through closure, including CJCSM 6510.01B category assignment, timely reporting, and currency of the ARCYBER incident-handling portal * Recommend containment and eradication actions in coordination with the affected mission owner and ISSO; execute approved critical blocks within the two-hour standard * Capture and perform initial analysis of volatile data, logs, and captured traffic; maintain chain of custody and coordinate evidence shipment to ARCYBER F&MA when required * On-Call Responsibilities – Phone response within 30 mins of incident and on-site reporting within one hour, when required
Quality Control and Reporting* Perform quality-control review of Tier 1 tickets prior to closure; conduct incident trend analysis * Provide technical inputs to the Daily Blue Team Operations Report and weekly and monthly Blue Team reporting
Work Environment* Onsite presence at USARC Headquarters, Fort Bragg, NC required * Rotating 8-hour shifts on a 24/7/365 watch including nights, weekends, and Federal holidays * Solo watch assignments during evening, night, weekend, and holiday periods
Qualifications
Specific Knowledge, Skills, & Abilities
Clearance Level: Secret
Education: BA/BS with 5+ years or AA with 7+ years
Certifications: DoDM 8140.03 qualified as DCWF 511 Cyber Defense Analyst, Intermediate (531 Incident Responder, Intermediate, for IR-assigned seats)
Benefits At SentarOur unique employee ownership model attracts top talent, giving employees the freedom to take initiative and drive meaningful improvements. In addition to cultivating a thriving and inclusive work environment, Sentar offers an extensive benefits package designed to support the well-being of employees and their families. Employee ownership is the foundation of our culture, promoting participation, teamwork, and accountability while ensuring long-term financial security and a commitment to excellence.
If you are not ready to apply for this position, submit your resume here to join our talent community. We'll keep you updated occasionally on new job opportunities.
Sentar is an Affirmative Action and Equal Opportunity Employer M/F/Vets/Persons with DisabilitiesOur culture is one of inclusivity and support. Sentar is proudly an Equal Opportunity and VEVRAA Federal Contractor Employer M/F/Vets/Persons with Disabilities. Follow these links to learn more about your rights: EEO Is the Law Poster; EEO Is Law Supplement; and Pay Transparency.
We want you to build your career at Sentar, so if you are an individual with a disability and require a reasonable workplace accommodation applying for a job or at any point in the employment process, contact the Recruiting Manager at recruiting@sentar.com. Please indicate the specifics of the assistance needed. Thank you for considering Sentar in your employment search.
Build, Innovate, Secure Your Career at Sentar.
