SOC Analyst

Tuknik Government Services, a Koniag Government Services company, is seeking a SOC Analyst to support TGS and our government customer in Baltimore, MD; Durham, NC; and Denver, CO. The ideal candidate will be able to obtain a Public Trust Clearance. This role provides 24/7/365 monitoring and analysis of security event alerts across the enterprise network, including monitoring agency systems, daily log events, and reviewing and ticketing potential security threats using the agency’s incident response-ticketing platform. All employees are considered mission critical and are expected to report even during inclement weather conditions. Essential Functions, Responsibilities & Duties Providing 24/7/365 monitoring and analysis of security event alerts across the enterprise network. Monitoring agency systems and daily log events to identify potential security threats utilizing sensor alert logs, firewall logs, content filtering logs, and Security Information and Event Management logs. Reviewing incoming alerts, investigating, and ticketing all identified potential security threats using the agency incident response ticketing platform. Prioritizing all incoming alerts and responding accordingly in a timely manner. Validating traffic and/or network activity as anomalous in accordance with agency standards and procedures. Identifying, investigating, and escalating potential security threats to senior agency resources when needed. Measuring and modeling traffic while identifying patterns and ports. Producing reports, both contractual and ad hoc, providing information on events, trends, issues, and activity as requested by the federal customer. Providing data for inclusion in the agency’s CISA report. Utilizing OSINT tools to identify and mitigate potential cybersecurity threats to the customer’s network. Identifying the need for and implementing new intrusion detection signatures. Work Experience, Knowledge, Skills & Abilities Minimum 1-2 years of experience as an analyst in a SOC or similar environment. Working knowledge of various SOC tools and their usage for detecting intrusion attempts. Demonstrated experience creating custom intrusion signatures to detect specific network traffic anomalies. Experience in populating sensors with newly available signatures when responding to events or management requests. Knowledge of threat reporting and tracking using a large-scale ticketing system such as ServiceNow, CAPRS, or similar. Ability to utilize email, instant messaging, and other monitoring tools to navigate through the incident response process. Strong oral presentation skills and ability to articulate English clearly and concisely. Experience with Windows Operating System and Microsoft 365 tools. Requirements High School Diploma accompanied with related advanced training and certifications in cybersecurity or a related field. BS/BA preferred. Must have at least one of the following certifications: CompTIA Network+, CompTIA Security+, or CompTIA CySA+. Proof of certifications required prior to start of employment. Experience with Windows Operating System and Microsoft 365 tools. Great written and oral communication skills, with the ability to convey complex information clearly and effectively. Must live within 2 hours travel of the designated Security Operations Center for which they are applying. Must be able to obtain a Public Trust clearance. Nice-to-haves Bachelor’s degree in computer science, cybersecurity, or information technology. Other advanced certifications such as CEH or CISSP. Home lab setup and participation in training platforms such as TryHackMe or similar. Equal Employment Opportunity Tuknik Government Services is an equal opportunity employer. The company will not discriminate against any employee or applicant because of race, color, religion, creed, ethnicity, sex, sexual orientation, gender identity, gender, national origin, ancestry, age, disability, citizenship, military/veteran status, marital status, genetic information, or any other characteristic protected by applicable federal, state, or local law. We are committed to equal employment opportunity in all decisions related to employment, promotion, wages, benefits, and all other privileges, terms, and conditions of employment. Accommodations If you require an accommodation to navigate or apply for a position on our website, please contact Heaven Wood via email at View email address on click.appcast.io or by calling View phone number on click.appcast.io to request accommodations. Company Information Koniag Government Services (KGS) is an Alaska Native Owned corporation that supports the values and traditions of our native communities through agile employee and corporate culture. As a wholly owned subsidiary of Koniag, we provide solutions to federal government agencies. For more information, visit Additional EEO Statement Equal Opportunity Employer/Veterans/Disabled. Shareholder Preference in accordance with Public Law 88-352. #J-18808-Ljbffr