Security Operations Analyst

Telos•Ashburn, VA

7d•Onsite

About The Position

The Security Operations Analyst is responsible for detecting, analyzing, investigating, and responding to cybersecurity incidents affecting Telos Corporation. The analyst continuously monitors enterprise security platforms, investigates security events, conducts proactive threat hunting, and works with Security Engineering, IT Operations, and other business stakeholders to improve the organization’s security posture. The position is based at Telos Corporation’s headquarters in Ashburn, Virginia. There are two openings: one Monday through Friday, 12:00 a.m. to 8:00 a.m.; and one Saturday through Wednesday, 8:00 a.m. to 4:00 p.m. Both shifts include holidays. The salary range is $65,000–$85,000 per year.

Requirements

At least two years of experience in information security, information technology, systems administration, network administration, or a related technical field.
Must meet or be able to meet DoD 8140 Cyber Workforce qualification requirements for the Cyber Defense Incident Responder (531) work role.
Familiarity with Linux, Windows, and Mac operating systems.
Experience with enterprise security technologies such as SIEM, EDR, vulnerability management, firewalls, email security, or other network security tools.
Understanding of common network protocols, operating system security, authentication, and system administration concepts.
Knowledge of common cyber threats, vulnerabilities, malware, and attack techniques.
Strong analytical, troubleshooting, and problem-solving skills.
Effective written and verbal communication skills and the ability to interact professionally with technical and non-technical personnel.
Organizational skills and the ability to prioritize multiple tasks in a dynamic environment.
Ability to work independently and collaboratively as part of a team.
Commitment to continuous learning and professional development.
Commitment to continuous improvement through documentation, process improvement, operational knowledge development, and professional growth.
Must meet eligibility requirements to access sensitive information, which requires U.S. citizenship.

Nice To Haves

Bachelor’s degree in a related field, or equivalent education, professional training, or work experience (six years).
Industry certifications such as CompTIA CySA+, EC-Council Certified Incident Handler (ECIH), Certified Ethical Hacker (CEH), or equivalent cybersecurity operations and incident response certifications.
Ability to obtain a U.S. Government security clearance.

Responsibilities

Monitor enterprise security platforms, including SIEM, EDR, email security, network security, cloud security, and identity systems, for malicious or suspicious activity.
Detect, analyze, investigate, document, and respond to cybersecurity incidents in accordance with established incident response procedures.
Conduct proactive threat hunting to identify activity not detected through automated methods.
Collect, preserve, analyze, and document evidence during security investigations.
Investigate security alerts, determine their scope and impact, and coordinate response activities with Information Technology, Security Engineering, and business stakeholders.
Assist with the administration, maintenance, and continuous improvement of enterprise security technologies.
Validate security controls and identify opportunities to improve detection, prevention, and response capabilities.
Identify security risks, threats, and vulnerabilities affecting systems, applications, cloud services, and enterprise infrastructure.
Maintain accurate case documentation and complete incident reports, shift turnover documentation, and assigned operational tasks in a timely manner.
Prepare technical documentation, investigation reports, metrics, and executive summaries concerning security incidents and operational activities.
Develop and maintain SOC playbooks, runbooks, and standard operating procedures.
Participate in continuous improvement activities, including detection tuning, threat intelligence review, and process improvement initiatives.
Support IT and security projects and perform other duties as assigned.