SOC Analyst — 24/7 Enterprise Security Monitor

Koniag Government Services; Durham (NC); On-site; USD 70,000 - 110,000; Full time

Benefits offered by this job

Health insurance

401K with company matching

Flexible spending accounts

Paid holidays

Three weeks paid time off

Job summary

Tuknik Government Services, LLC, a Koniag Government Services company, seeks a SOC Analyst to support our government customer in Durham, NC. The role involves 24/7/365 monitoring and analysis of security event alerts across the enterprise network, with a Public Trust clearance.

You will review alerts, investigate incidents using the agency's ticketing platform, and generate reports for the federal customer.

Qualifications

• Minimum 2–4 years of analyst experience in a SOC or similar environment.
• Experience with SOC tools to detect intrusion attempts.
• Experience creating custom intrusion signatures to detect network traffic anomalies.
• Experience populating sensors with new signatures in response to events.

Responsibilities

• Provide 24/7/365 monitoring and analysis of security event alerts across the enterprise network.
• Monitor agency systems and logs to identify potential security threats.
• Review alerts, investigate, and ticket identified threats using the incident response platform.
• Prioritize alerts and respond promptly according to procedures.
• Validate traffic as anomalous per agency standards.
• Identify and escalate threats to senior resources when needed.
• Produce contractual and ad hoc reports for the federal customer.
• Provide data for inclusion in the agency's CISA report.

Skills

SOC monitoring

Threat analysis

Incident response

Ticket management

English communication

Education

High School Diploma with cybersecurity training

BS/BA preferred

Tools

ServiceNow

CAPRS

Microsoft 365 tools

Windows OS

Job description

Tuknik Government Services, LLC, a Koniag Government Services company, seeks a SOC Analyst to support our government customer in Durham, NC. The role involves 24/7/365 monitoring and analysis of security event alerts across the enterprise network, with a Public Trust clearance.

You will review alerts, investigate incidents using the agency's ticketing platform, and generate reports for the federal customer.