Security Operations Analyst – Tier 2

About the role

Knox Systems is seeking a Tier 2 Security Operations Analyst to lead a shift in its Cyber Fusion Center. You will be the senior analyst on duty, handling escalations, guiding junior staff, and ensuring the security of critical federal cloud environments.

Key responsibilities

• Run a shift independently, acting as the senior analyst for most of the schedule.
• Take Tier 1 escalations through containment or hand‑off.
• Coach on‑duty analysts, providing guidance without taking over decisions.
• Maintain detailed shift logs to support seamless handovers.
• Handle escalated customer requests and set queue‑working standards.
• Suggest improvements to detections and runbooks based on shift observations.

Required profile

• Three or more years of hands‑on security or network operations experience, including shift work.
• Strong escalation judgment – knowing when to contain, monitor, or alert.
• Security+ certification (or equivalent); CySA+ or SSCP is a plus and can be funded.
• Willingness to teach less‑experienced team members under time pressure.

Required skills

• Security operations
• Network operations
• Incident containment
• Detection engineering
• Runbook development

What we offer

• Fixed, published schedule with no rotating shifts.
• Four‑day rotation providing three consecutive days off each week.
• Coverage of certification costs and renewals.