Security Operations Analyst - Tier 3

About the role

Knox-systems is seeking a Tier 3 Security Operations Analyst to lead the evening shift (14:00‑22:00) in its Cyber Fusion Center. You will be the senior point of contact for security incidents, escalation decisions, and team standards, ensuring the reliability and compliance of critical federal cloud environments.

Key responsibilities

• Lead the evening shift, setting escalation criteria and managing incident containment.
• Conduct root‑cause analysis for all contained incidents and update runbooks to prevent recurrence.
• Maintain high‑quality shift logs, handovers, and overall queue health across all shifts.
• Develop Tier 1 and Tier 2 analysts, preparing them for promotion.
• Represent the team in incident reviews and FedRAMP evidence documentation.

Required profile

• Minimum five years of experience in security operations, including senior floor responsibility.
• Proven track record of mentoring and developing junior analysts.
• Strong understanding of cloud security monitoring, detection engineering, and incident response.
• Confidence to define standards and enforce them across the team.

Required skills

• Cloud security monitoring
• Detection engineering
• Incident response
• FedRAMP controls and evidence work

What we offer

• Fixed, published schedule with no rotating shifts.
• Four‑day workweek with three consecutive days off each week.
• Opportunity to learn federal authorization processes and advance to a NOSC Manager role.