Senior Security Operations Analyst - Shift Lead

Knox Systems, Inc; Arlington, Northern (VA, KY); Hybrid; USD 100,000 - 135,000; Full time

Benefits offered by this job

Shift premium

Published salary band

Three days off per week

Certification costs covered

401k plan

Job summary

Knox Systems, Inc. is seeking a senior security analyst to run on-site shifts, manage escalations, and coach junior staff. You will oversee incident containment, ensure thorough shift-wid logs, and drive improvements in detections and runbooks for federal government–grade environments.

The role emphasizes leadership on shift, hands-on security and readiness to handle high-stakes situations while supporting a compliant, secure cloud and network operations framework.

Qualifications

• Three or more years of hands-on security or network operations, including shift work.
• Good escalation judgment - when to contain, when to keep watching, and when to wake someone up.
• Security+ or equivalent. CySA+ or SSCP is a plus, and we'll fund it if you don't have it yet.
• Willingness to teach someone less experienced than you, under time pressure.

Responsibilities

• Run a shift without supervision - you are the senior analyst on duty for most of it.
• Take escalations from Tier 1 and see them through to containment or handover.
• Coach the analyst on duty through the decision rather than taking it away from them.
• Own the quality of your shift log. If the next shift has to call you, it wasn't detailed enough.
• Handle escalated customer requests and set the standard for how the queue gets worked.
• Suggest detection and runbook improvements based on what you see on shift.

Skills

Security operations

Shift work

Escalation handling

Team coaching

Education

Security+ or equivalent

Job description

Knox Systems, Inc. is seeking a senior security analyst to run on-site shifts, manage escalations, and coach junior staff. You will oversee incident containment, ensure thorough shift-wid logs, and drive improvements in detections and runbooks for federal government–grade environments.

The role emphasizes leadership on shift, hands-on security and readiness to handle high-stakes situations while supporting a compliant, secure cloud and network operations framework.