SOC Analyst - 24/7 Security Operations Center

Koniag Services, Inc.; Durham (NC); On-site; USD 70,000 - 100,000; Full time

Job summary

Tuknik Government Services, LLC, a Koniag Government Services company, seeks a SOC Analyst to monitor and analyze security events for a federal customer in Durham, NC. The role requires ability to obtain a Public Trust and involves 24/7/365 monitoring across the enterprise network.

The analyst will review alerts, investigate, and ticket threats using the agency’s incident response platform, validate anomalies, and escalate when needed. Strong OSINT and signature creation expertise are a plus.

Qualifications

• Minimum 2–4 years of experience in a SOC or similar environment.
• Must have working knowledge of SOC tools and usage for detecting intrusion attempts.
• Experience creating custom intrusion signatures to detect specific network traffic anomalies.
• Experience populating sensors with newly available signatures.
• Knowledge of ticketing systems (ServiceNow, CAPRS, or similar).
• Strong written and oral communication skills; proficient in English.

Responsibilities

• Provide 24/7/365 monitoring and analysis of security event alerts across the enterprise network.
• Review alerts, investigate, and ticket potential threats using the incident response platform.
• Prioritize alerts and respond in a timely manner.
• Validate traffic/net activity as anomalous per agency standards.
• Identify, investigate, and escalate threats to senior resources as needed.
• Produce reports and provide data for CISA reporting.

Skills

SOC tools

Intrusion signatures

Sensor signatures

Ticketing systems

Communication

Windows & M365

SOC analyst experience

Education

High School Diploma

BS/BA preferred

Certifications: Network+/Security+/CySA+

Job description

Tuknik Government Services, LLC, a Koniag Government Services company, seeks a SOC Analyst to monitor and analyze security events for a federal customer in Durham, NC. The role requires ability to obtain a Public Trust and involves 24/7/365 monitoring across the enterprise network.

The analyst will review alerts, investigate, and ticket threats using the agency’s incident response platform, validate anomalies, and escalate when needed. Strong OSINT and signature creation expertise are a plus.