Security Operations Center (SOC) Analyst – 120 Days

MISO's Cyber Threat Action Center (CTAC) offers a 120-day SkillBridge fellowship for transitioning service members with cyber operations backgrounds. Fellows train alongside experienced SOC analysts in a 24x7 production environment defending critical electric grid infrastructure. The program moves through three structured phases: SOC fundamentals and tool proficiency, supervised operations and threat hunting, and a capstone project. Fellows exit with training aligned to CompTIA CySA+, EC-Council CSA, and Splunk Core Certified User certifications.

About the Role:MISO's CTAC defends critical electric grid infrastructure by monitoring, analyzing, and responding to cyber threats around the clock. This fellowship places you directly alongside experienced cyber defenders in a structured, mission-relevant environment designed to translate your military experience into civilian cybersecurity skills.What You Will Do:Monitor and triage security alerts from SIEM, EDR, and network detection platforms. Perform initial analysis of suspicious activity and escalate confirmed incidents. Apply threat hunting methodologies using real-world data sets. Document investigative steps and support case management workflows. Contribute to detection content improvement and SOC process refinement. Participate in incident response activities aligned to NIST SP 800-61.What You Will Learn:Phase 1 covers SOC foundations, network and log analysis, tool familiarization, and energy sector threat landscape. Phase 2 moves into supervised SOC operations, intermediate SIEM skills, detection tuning, and guided threat hunting. Phase 3 focuses on incident response participation, security automation, and a capstone project you design and present.Who Should Apply:This fellowship targets transitioning service members with backgrounds in cyber operations. Targeted ratings and MOSs include Air Force 1B4X1 and 1D7X1D, Army 17D and 25D, and Navy CWT. All services are welcome to apply.What You Take With You:A letter of completion documenting tools used, hours of supervised SOC operations, and your capstone deliverable. Training aligned to CompTIA Security+, CompTIA CySA+, EC-Council Certified SOC Analyst, GIAC GSEC, and Splunk Core Certified User.If interested, please send your resume or send questions to SkillBridge@misoenergy.org.