RefolkCandidates
Open nowEngineeringCyber Fusion Center

Security Operations Analyst - Tier 2

Knox Systems · USA

Location
USA
Employment
Full time
Level
Mid level
Posted
4 weeks ago

About this role

About Knox

Knox runs the largest Federal & DoW managed cloud, building and operating secure cloud and AI environments that support the U.S. government’s most critical missions - from national security and public safety to essential public services. Our customers rely on Knox to deploy production systems that meet the highest standards for security, reliability, and compliance.


Work at Knox is high-impact and purpose-driven. The problems we solve are high-stakes, the expectations are high, and the results are visible. Speed, rigor, and trust matter here - because the environments we secure cannot fail. Your contributions are visible, your expertise is relied upon, and the impact of your work is immediate and measurable. We operate at federal scale, securing some of the most sensitive government environments in the country - because the systems we build must perform without fail.

How We Work

Most companies run a security team and a network team separately. We don’t. At Knox one team watches everything - performance, availability and security - out of the same queue. You see the whole picture, and a problem never sits with the wrong team while the clock runs. It is a better way to work and a much faster way to learn.

How We Prioritize

1. Active intrusion or suspected compromise

2. Service-affecting outage

3. Degradation and early warning signs

4. Customer requests and tickets

You set the pace on your shift, and you are the one who decides when something moves up the list.

What You'll Do

• Run a shift without supervision - you are the senior analyst on duty for most of it.

• Take escalations from Tier 1 and see them through to containment or handover.

• Coach the analyst on duty through the decision rather than taking it away from them.

• Own the quality of your shift log. If the next shift has to call you, it wasn’t detailed enough.

• Handle escalated customer requests and set the standard for how the queue gets worked.

• Suggest detection and runbook improvements based on what you see on shift.

What You'll Need

• Three or more years of hands-on security or network operations, including shift work.

• Good escalation judgment - when to contain, when to keep watching, and when to wake someone up.

• Security+ or equivalent. CySA+ or SSCP is a plus, and we’ll fund it if you don’t have it yet.

• Willingness to teach someone less experienced than you, under time pressure.

What We'll Teach You

• Our environment, our detections, and how the FedRAMP evidence chain fits together.

• Detection engineering and tuning at a level Tier 1 doesn’t touch.

• The path to Tier 3, shift lead.

What We Don't Require

• A degree.

• Previous corporate experience.

• An active security clearance. If you hold one, or held one, that’s a plus - it is never a requirement.

What We Offer

• Your schedule is fixed and published ahead of time. Shifts do not rotate.

• Three consecutive days off every week on the four-day rotation schedules.

• Certification costs and renewals covered, including the first attempt and a retake.

• Shift premium paid on the hours you actually work in a premium window, at a published rate.

• A published salary band, and a published band for the level above you.

• We are a small team, so what you do is visible. You will make an impact.

Compensation Range: $100k-$135k, variable annual bonus, equity and monthly premium payments.

Hiring Requirement: Due to the nature of our work with federal government clients and compliance with applicable regulations, this position requires U.S. citizenship. Dual citizenship is not permitted for this role. Candidates must be able to provide documentation verifying sole U.S. citizenship status as part of the background check process and ability to pass a government background check.

Any offer of employment is contingent upon the successful completion of all required pre-employment screenings, including a background check, in accordance with applicable laws and government contract requirements.

Benefits & Perks

Knox offers a competitive employee benefits package including Medical, Dental, Vision, Life & Disability, unlimited PEO, and an employee funded 401k plan. Please note, benefits are subject to change.

We are an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. Employment decisions are made without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, disability, veteran status, or any other legally protected status.

Knox is proud to support veteran hiring - we encourage veterans and transitioning service members to apply and welcome the unique skills and experience you bring.

As published by Knox Systems. Applications are handled on their site.

Skills this posting mentions

ComplianceBackground ChecksFederal Government

About Knox Systems

FedRAMP in 90 Days for 90% less.

All 10 openings at Knox Systems

One click, then it is written

Apply to Knox Systems with a resume written for this role.

Queue Security Operations Analyst - Tier 2 and I read the posting, rewrite your resume against it, draft the cover letter, and score the fit. Then you press send, or press one button and I fill in Knox Systems’s form for you.

  1. 01Drop your resume

    A PDF or a LinkedIn URL. About a minute, once.

  2. 02I rank the openings

    Every weekday morning, the live catalog scored against your history. Up to 20 worth your time, not two hundred links.

  3. 03Each one is written up

    Resume rewritten for the posting, a cover letter, a fit score. Press send, or let me fill in the form.

  • 25 sent a week, free
  • No card
  • Nothing sent until you say so

More roles at Knox Systems

See all

Similar roles elsewhere

See more

Put this to work

Paste your career in once. Every application after that is written for you.

Drop a resume or a LinkedIn URL. I rank the live openings against it, rewrite the resume and write a cover letter for the best of them, and fill in the employer's form when you press the button. You read, you decide what goes out.

  1. 01Drop your resume

    A PDF or a LinkedIn URL. About a minute, once.

  2. 02I rank the openings

    Every weekday morning, the live catalog scored against your history. Up to 20 worth your time, not two hundred links.

  3. 03Each one is written up

    Resume rewritten for the posting, a cover letter, a fit score. Press send, or let me fill in the form.

  • New matches ranked and written before you are up.
  • Every bullet stays inside what your history supports. Nothing invented.
  • Queued, submitted, interviewing, offer: one screen, not a spreadsheet.

500 free credits on sign-up. No card. Nothing is sent until you say so.

Listed from the job board Knox Systems publishes. Refolk is not the employer and does not handle their hiring. Applications go to Knox Systems directly.