Security Operations Center Analyst - Low

Security Operations Center Analyst
- Low

Koniag Data Solutions, LLC, a Koniag Government Services company, is seeking a Security Operations Center Analyst
- Low to support KDS and our government customer in Washington, DC. This position requires the candidate to be able to obtain a Public Trust.

We offer competitive compensation and an extraordinary benefits package including health, dental and vision insurance, 401K with company matching, flexible spending accounts, paid holidays, three weeks paid time off, and more.

Koniag Data Solutions, a Koniag Government Services company, is seeking a motivated and detail-oriented Junior Security Operations Center (SOC) Analyst to support the U.S. Small Business Administration (SBA). The ideal candidate is an early-career cybersecurity professional with a foundational understanding of security operations, network security monitoring, and incident response concepts. This individual will work under the guidance and mentorship of senior SOC analysts and the Cybersecurity Operations Technical Lead, supporting the continuous monitoring and defense of SBA's enterprise IT environment and gaining valuable hands-on experience in federal cybersecurity operations.

The Junior SOC Analyst will support the continuous monitoring, threat detection, and incident response activities of SBA's Security Operations Center, performing first-line security event monitoring, alert triage, and incident documentation under the direction of senior SOC staff.

Principal responsibilities will include but are not limited to:

• Perform first-line monitoring and triage of security alerts and events generated by SBA's SIEM platform, IDS/IPS systems, endpoint detection and response (EDR) tools, and other security monitoring technologies, escalating potential security incidents to senior SOC analysts in accordance with established SOC procedures and escalation protocols.
• Assist in the initial triage and analysis of security events and alerts, applying foundational knowledge of common threat indicators, attack patterns, and malicious activity signatures to differentiate true positive security incidents from false positive alerts under the guidance of senior SOC staff.
• Support incident response activities for identified security incidents, assisting senior analysts in documenting incident details, collecting relevant evidence, and maintaining accurate and timely incident records in SBA's incident management and ticketing systems.
• Monitor SBA's networks, systems, and endpoints for indicators of compromise (IOCs), anomalous activity, and policy violations, escalating observations and findings to senior SOC analysts for further investigation and response.
• Assist in the collection, review, and analysis of security-relevant log data from diverse sources, including Windows Event Logs, Syslog, firewall logs, web proxy logs, and application logs, supporting senior analysts in identifying patterns of potentially malicious activity.
• Support the documentation and tracking of security incidents, tickets, and cases within SBA's incident management platform, ensuring accurate, complete, and timely recording of incident details, response actions, and resolution status.
• Assist in the preparation of SOC shift handoff reports, daily activity summaries, and security event trend reports, supporting senior SOC staff in maintaining situational awareness and communicating SOC activity status to leadership.
• Support vulnerability management activities by assisting in the review and documentation of vulnerability scan results, tracking remediation ticket status, and maintaining accurate vulnerability management records under the guidance of senior SOC staff.
• Assist in maintaining and updating SOC documentation, including Standard Operating Procedures (SOPs), incident response playbooks, runbooks, and knowledge base articles, ensuring documentation remains current and accurately reflects SOC operational procedures and lessons learned.
• Participate actively in SOC team meetings, briefings, training sessions, and knowledge-sharing activities, applying lessons learned and new knowledge to continuously improve personal performance and contribute to the overall capability of the SOC team.
• Support the review and analysis of threat intelligence reports and advisories from US-CERT, CISA, and other government and commercial sources, assisting senior analysts in identifying relevant threats and IOCs applicable to SBA's environment.
• Assist in the monitoring and enforcement of SBA's security policies and acceptable use standards, documenting potential policy violations and escalating findings to senior SOC staff for review and disposition.
• Support purple team and tabletop exercise activities by assisting in the documentation of exercise scenarios, findings, and lessons learned, contributing to the continuous improvement of SBA's detection and response capabilities.
• Engage in continuous self-directed learning and professional development activities to build expertise…