24/7 Security Operations Analyst – Cloud & SIEM Focus

Chenega Corporation; Virginia; Hybrid; USD 90,000 - 120,000; Full time

Job summary

Chenega MIOS (Astraeus Operations subsidiary) in Tysons Corner, VA, seeks a Security Operations Analyst to provide on-site, 24/7/365 Tier 1 security monitoring, incident triage, and management of ServiceNow cases. The role supports Google Public Sector in sovereign, classified environments and GDC Air-gapped security fabrics, coordinating with Google SecOps engineering.

You will monitor SIEM/EDR alerts, enrich events, and maintain end-to-end alert ownership, customer communication, and incident

Responsibilities

• Monitor GDC Air-gapped security fabrics and CUI domains using Google Managed SecOps tools; analyze events in Splunk, ELK, designated SIEM systems, and EDR tools.
• Provide initial GPS customer and incident-reporting support via email and support portals. Acknowledge alerts within 5 minutes of creation; deliver a First Meaningful Response (FMR) within 15 minutes for High/Critical alerts and 25 minutes for all others.
• Collect and analyze event descriptions, affected-system details, security telemetry, and related evidence. Assess severity and operational impact and correlate events for high-confidence triage. Develop evidence-based disposition recommendations and elevate confirmed threats to the appropriate Google SecOps representative in accordance with established procedures and runbooks.
• Own and actively manage ServiceNow incidents and investigations, including analysis, customer updates, follow-on actions, and required government incident-report drafts. Transfer ownership only with explicit Google manager approval; coordinate incident response and required EDR tooling with Google SecOps.
• Before Google on-call consults, evaluate observed activity, results of playbooks and investigative queries, IOCs, and supporting technical evidence to develop a proposed incident disposition and recommended next steps. For active High/Critical shift handoffs, document current status, analysis completed, analytical findings, and recommended next steps; immediately accept incoming incidents without rejection.
• Provide hands-on-keyboard accreditation support to demonstrate and validate playbooks, runbooks, IT infrastructure, and Data Center operations. Evaluate alert effectiveness and playbook performance, identify detection or workflow gaps, and develop tuning and process improvement recommendations.
• Support continuous coverage during holidays and severe or inclement weather; coordinate with teammates to keep at least one FTE in each occupied SecOps room. Answer and route SecOps calls, seek on-call guidance as needed, and respond to SecOps virtual communications within 15 minutes.
• When designated live Queue Manager, monitor alert timers and intervene at least 5 minutes before response targets expire. As designated senior analyst, pre-screen off-hours consults for next-business-day Manager review.
• Participate in requested customer situational awareness calls; assess reported information for security and operational significance, identify potential impacts requiring further investigation or response, and communicate relevant findings and tasking through designated channels using appropriate unclassified working when required.
• Maintain records and supply weekly activity report inputs: alert response SLA compliance, triage dispositions, playbooks validated/updated, noisy alerts and tuning

Job description

Chenega MIOS (Astraeus Operations subsidiary) in Tysons Corner, VA, seeks a Security Operations Analyst to provide on-site, 24/7/365 Tier 1 security monitoring, incident triage, and management of ServiceNow cases. The role supports Google Public Sector in sovereign, classified environments and GDC Air-gapped security fabrics, coordinating with Google SecOps engineering.

You will monitor SIEM/EDR alerts, enrich events, and maintain end-to-end alert ownership, customer communication, and incident