Security Operations Analyst

The most security-conscious organizations trust Telos Corporation to protect their vital IT assets. The reputation of our company rests on the quality of our solutions and the integrity of our people. Explore what you can bring to our solutions in the areas of cyber, cloud and enterprise security.

Be a part of the Telos culture and see what sets us apart! Telos offers an excellent compensation package with benefits that include generous paid time off, medical, dental, vision, tuition reimbursement, and 401k. The salary range for these openings is $65K - $85K per year. Our employees enjoy more than just a great work environment!

This position will be based at Ashburn, VA (HQ) - There are 2 openings one for each of the following shifts, Monday
- Friday 12AM - 8AM and Saturday
- Wednesday 8AM - 4PM and includes holidays.

The Security Operations Center (SOC) Analyst is responsible for detecting, analyzing, investigating, and responding to cybersecurity incidents affecting Telos Corporation. The SOC Analyst continuously monitors enterprise security platforms, investigates security events, conducts proactive threat hunting, and works closely with Security Engineering, IT Operations, and other business stakeholders to improve the organization's security posture.

• Monitor enterprise security platforms, including SIEM, EDR, email security, network security, cloud security, and identity systems, for indicators of malicious or suspicious activity.
• Detect, analyze, investigate, document, and respond to cybersecurity incidents in accordance with established incident response procedures.
• Perform proactive threat hunting activities to identify malicious or suspicious activity not identified through automated detection.
• Collect, preserve, analyze, and document evidence during security investigations.
• Investigate security alerts, determine scope and impact, and coordinate response activities with Information Technology, Security Engineering, and business stakeholders.
• Assist with the administration, maintenance, and continuous improvement of enterprise security technologies.
• Validate the effectiveness of security controls and identify opportunities to improve detection, prevention, and response capabilities.
• Identify security risks, threats, and vulnerabilities affecting systems, applications, cloud services, and enterprise infrastructure.
• Maintain accurate case documentation and ensure timely completion of incident reports, shift turnover documentation, and assigned operational tasks.
• Produce clear technical documentation, investigation reports, metrics, and executive summaries for security incidents and operational activities.
• Develop and maintain SOC documentation, including playbooks, runbooks, and standard operating procedures.
• Participate in continuous improvement activities, including detection tuning, threat intelligence review, and process improvement initiatives.
• Support IT and security projects and perform other duties as assigned.

Qualifications:

• Bachelor's degree in a related field preferred, or the equivalent combination of education, professional training or work experience (6 years).
• Two (2) or more years of experience in information security, information technology, systems administration, network administration, or a related technical field.
• Must meet or be able to meet DoD 8140 Cyber Workforce qualification requirements for the Cyber Defense Incident Responder (531) work role.
• Industry certifications such as CompTIA CySA+, EC-Council Certified Incident Handler (ECIH), Certified Ethical Hacker (CEH), or equivalent cybersecurity operations and incident response certifications are highly desirable.
• Familiarity with…