Security Operations Analyst - Tier 3
About The Position
Knox runs the largest Federal & DoW managed cloud, building and operating secure cloud and AI environments that support the U.S. government’s most critical missions — from national security and public safety to essential public services. Our customers rely on Knox to deploy production systems that meet the highest standards for security, reliability, and compliance. Work at Knox is high-impact and purpose-driven. The problems we solve are high-stakes, the expectations are high, and the results are visible. Speed, rigor, and trust matter here - because the environments we secure cannot fail. Your contributions are visible, your expertise is relied upon, and the impact of your work is immediate and measurable. We operate at federal scale, securing some of the most sensitive government environments in the country - because the systems we build must perform without fail. Most companies run a security team and a network team separately. We don’t. At Knox one team watches everything — performance, availability and security — out of the same queue. You see the whole picture, and a problem never sits with the wrong team while the clock runs. It is a better way to work and a much faster way to learn. Priorities are: 1. Active intrusion or suspected compromise, 2. Service-affecting outage, 3. Degradation and early warning signs, 4. Customer requests and tickets. When the right answer isn’t obvious, you’re the one who decides. That call is part of the role, not a favor we’re asking.
Requirements
- Five or more years in security operations, including time as the senior person on a floor.
- A track record of developing people, not only of resolving incidents.
- A strong grounding in cloud security monitoring, detection engineering and incident response.
- The confidence to set a standard and hold the team to it.
- U.S. citizenship. Dual citizenship is not permitted for this role.
- Ability to provide documentation verifying sole U.S. citizenship status as part of the background check process.
- Ability to pass a government background investigation.
Nice To Haves
- An active security clearance. If you hold one, or held one, that’s a plus — it is never a requirement.
Responsibilities
- Lead the evening shift as the senior person on the floor from 14:00 to 22:00.
- Set the escalation criteria — what wakes a manager, what waits, and what the team handles alone.
- Run root cause on anything that reached containment, and update the runbook so it doesn’t recur.
- Set and hold the standard for shift logs, handovers and queue health across all shifts.
- Develop the Tier 1 and Tier 2 analysts. Their readiness for promotion is part of your job.
- Represent the team in incident reviews and FedRAMP evidence work.
Benefits
- Certification costs and renewals covered, including the first attempt and a retake.
- Shift premium paid on the hours you actually work in a premium window, at a published rate.
- A published salary band, and a published band for the level above you.
- Medical, Dental, Vision, Life & Disability, unlimited PEO, and an employee funded 401k plan.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
