Security Operations Analyst

Archer is collaborating with Telos to connect them with exceptional professionals for this role.

The most security-conscious organizations trust Telos Corporation to protect their vital IT assets. The reputation of our company rests on the quality of our solutions and the integrity of our people. Explore what you can bring to our solutions in the areas of cyber, cloud and enterprise security.

Be a part of the Telos culture and see what sets us apart! Telos offers an excellent compensation package with benefits that include generous paid time off, medical, dental, vision, tuition reimbursement, and 401k. The salary range for these openings is $65K - $85K per year. Our employees enjoy more than just a great work environment!

This position will be based at Ashburn, VA (HQ) - There are 2 openings one for each of the following shifts, Monday
- Friday 12AM - 8AM and Saturday
- Wednesday 8AM - 4PM and includes holidays.

• Monitor enterprise security platforms, including SIEM, EDR, email security, network security, cloud security, and identity systems, for indicators of malicious or suspicious activity.
• Detect, analyze, investigate, document, and respond to cybersecurity incidents in accordance with established incident response procedures.
• Perform proactive threat hunting activities to identify malicious or suspicious activity not identified through automated detection.
• Collect, preserve, analyze, and document evidence during security investigations.
• Investigate security alerts, determine scope and impact, and coordinate response activities with Information Technology, Security Engineering, and business stakeholders.
• Assist with the administration, maintenance, and continuous improvement of enterprise security technologies.
• Validate the effectiveness of security controls and identify opportunities to improve detection, prevention, and response capabilities.
• Identify security risks, threats, and vulnerabilities affecting systems, applications, cloud services, and enterprise infrastructure.
• Maintain accurate case documentation and ensure timely completion of incident reports, shift turnover documentation, and assigned operational tasks.
• Produce clear technical documentation, investigation reports, metrics, and executive summaries for security incidents and operational activities.
• Develop and maintain SOC documentation, including playbooks, runbooks, and standard operating procedures.
• Participate in continuous improvement activities, including detection tuning, threat intelligence review, and process improvement initiatives.
• Support IT and security projects and perform other duties as assigned.

• Bachelor’s degree in a related field preferred, or the equivalent combination of education, professional training or work experience (6 years).
• Two (2) or more years of experience in information security, information technology, systems administration, network administration, or a related technical field.
• Must meet or be able to meet DoD 8140 Cyber Workforce qualification requirements for the Cyber Defense Incident Responder (531) work role.
• Industry certifications such as CompTIA CySA+, EC-Council Certified Incident Handler (ECIH), Certified Ethical Hacker (CEH), or equivalent cybersecurity operations and incident response certifications are highly desirable.
• Familiarity with Linux/Windows/Mac Operating Systems.
• Experience with enterprise security technologies such as SIEM, EDR, vulnerability management, firewalls, email security, or other network security tools.
• Understanding of common network protocols, operating system security, authentication, and system administration concepts.
• Knowledge of common cyber threats, vulnerabilities, malware, and attack techniques.
• Strong analytical, troubleshooting, and problem-solving skills.
• Effective written and verbal communication skills and the ability to interact professionally with technical and non-technical personnel.
• Demonstrated organizational skills and the ability to prioritize multiple tasks in a dynamic environment.
• Ability to work independently and collaboratively as part of a team.
• Demonstrated commitment to continuous learning and professional development.
• Demonstrated commitment to continuous improvement through documentation, process improvement, operational knowledge development, and professional growth.
• Ability to obtain a U.S. Government security clearance is preferred.

The successful candidate must meet eligibility requirements to access sensitive information,…