Security Operations Analyst - Tier 3

Knox Systems, Inc; Arlington, Northern (VA, KY); Hybrid; USD 125,000 - 160,000; Full time

Benefits offered by this job

Medical insurance

Dental

Vision

Life & Disability

401k plan

Job summary

Knox Systems, Inc. seeks a senior security operations lead to own the 14:00–22:00 shift, define escalation criteria, and drive incident response for federal-grade cloud environments. You will update runbooks, ensure log quality, and mentor Tier 1/2 analysts to readiness and promotion.

The role emphasizes cloud security monitoring, detection engineering and incident response, with responsibility in reviews and FedRAMP activities. US citizenship is required.

Qualifications

• Five or more years in security operations, including time as the senior person on a floor.
• Track record of developing people and leading teams.
• Strong grounding in cloud security monitoring, detection engineering and incident response.
• Ability to set standards and hold teams accountable.

Responsibilities

• Lead the evening shift as the senior person on the floor from 14:00 to 22:00.
• Set escalation criteria and determine what wakes a manager or can be handled by the team.
• Run root cause analysis on containment incidents and update playbooks.
• Maintain shift logs, handovers and queue health across all shifts.
• Develop Tier 1 and Tier 2 analysts for readiness and promotion.
• Represent the team in incident reviews and FedRAMP evidence work.

Skills

Security operations

Cloud security

Incident response

Leadership

Job description

About Knox

Knox runs the largest Federal & DoW managed cloud, building and operating secure cloud and AI environments that support the U.S. government’s most critical missions — from national security and public safety to essential public services. Our customers rely on Knox to deploy production systems that meet the highest standards for security, reliability, and compliance.

Work at Knox is high-impact and purpose-driven. The problems we solve are high-stakes, the expectations are high, and the results are visible. Speed, rigor, and trust matter here - because the environments we secure cannot fail. Your contributions are visible, your expertise is relied upon, and the impact of your work is immediate and measurable. We operate at federal scale, securing some of the most sensitive government environments in the country - because the systems we build must perform without fail.

How We Work

Most companies run a security team and a network team separately. We don’t. At Knox one team watches everything — performance, availability and security — out of the same queue. You see the whole picture, and a problem never sits with the wrong team while the clock runs. It is a better way to work and a much faster way to learn.

How We Prioritize

1. Active intrusion or suspected compromise

2. Service-affecting outage

3. Degradation and early warning signs

4. Customer requests and tickets

When the right answer isn’t obvious, you’re the one who decides. That call is part of the role, not a favor we’re asking.

What You'll Do

• Lead the evening shift as the senior person on the floor from 14:00 to 22:00.
• Set the escalation criteria — what wakes a manager, what waits, and what the team handles alone.
• Run root cause on anything that reached containment, and update the runbook so it doesn’t recur.
• Set and hold the standard for shift logs, handovers and queue health across all shifts.
• Develop the Tier 1 and Tier 2 analysts. Their readiness for promotion is part of your job.
• Represent the team in incident reviews and FedRAMP evidence work.

What You'll Need

• Five or more years in security operations, including time as the senior person on a floor.
• A track record of developing people, not only of resolving incidents.
• A strong grounding in cloud security monitoring, detection engineering and incident response.
• The confidence to set a standard and hold the team to it.

What We'll Teach You

• How FedRAMP controls and evidence work inside a federal authorization boundary.
• Our environment, our customers, and how security and availability work fit together here.
• Where this role goes next — NOSC Manager is the position above it.

What We Don't Require

• A degree.
• Previous corporate experience.
• An active security clearance. If you hold one, or held one, that’s a plus — it is never a requirement.

What We Offer

• Your schedule is fixed and published ahead of time. Shifts do not rotate.
• Three consecutive days off every week on the four-day rotation schedules.
• Certification costs and renewals covered, including the first attempt and a retake.
• Shift premium paid on the hours you actually work in a premium window, at a published rate.
• A published salary band, and a published band for the level above you.
• We are a small team, so what you do is visible. You will make an impact.

Compensation Range: $125k-$160k, variable annual bonus, equity and monthly premium payments.

Hiring Requirement: Due to the nature of our work with federal government clients and compliance with applicable regulations, this position requires U.S. citizenship. Dual citizenship is not permitted for this role. Candidates must be able to provide documentation verifying sole U.S. citizenship status as part of the background check process and ability to pass a government background investigation.

Any offer of employment is contingent upon the successful completion of all required pre-employment screenings, including a background check, in accordance with applicable laws and government contract requirements.

Benefits & Perks

Knox offers a competitive employee benefits package including Medical, Dental, Vision, Life & Disability, unlimited PEO, and an employee funded 401k plan. Please note, benefits are subject to change.

We are an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. Employment decisions are made without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, disability, veteran status, or any other legally protected status.

Knox is proud to support veteran hiring — we encourage veterans and transitioning service members to apply and welcome the unique skills and experience you bring.