Security Operations Analyst - Tier 2 at Knox Systems

Job description

About Knox Knox runs the largest Federal & DoW managed cloud, building and operating secure cloud and AI environments that support the U.S. government’s most critical missions — from national security and public safety to essential public services. Our customers rely on Knox to deploy production systems that meet the highest standards for security, reliability, and compliance. Work at Knox is high-impact and purpose-driven. The problems we solve are high-stakes, the expectations are high, and the results are visible. Speed, rigor, and trust matter here - because the environments we secure cannot fail. Your contributions are visible, your expertise is relied upon, and the impact of your work is immediate and measurable. We operate at federal scale, securing some of the most sensitive government environments in the country - because the systems we build must perform without fail. HOW WE WORK Most companies run a security team and a network team separately. We don’t. At Knox one team watches everything — performance, availability and security — out of the same queue. You see the whole picture, and a problem never sits with the wrong team while the clock runs. It is a better way to work and a much faster way to learn. HOW WE PRIORITIZE 1. Active intrusion or suspected compromise 2. Service-affecting outage 3. Degradation and early warning signs 4. Customer requests and tickets You set the pace on your shift, and you are the one who decides when something moves up the list. WHAT YOU'LL DO • Run a shift without supervision — you are the senior analyst on duty for most of it. • Take escalations from Tier 1 and see them through to containment or handover. • Coach the analyst on duty through the decision rather than taking it away from them. • Own the quality of your shift log. If the next shift has to call you, it wasn’t detailed enough. • Handle escalated customer requests and set the standard for how the queue gets worked. • Suggest detection and runbook improvements based on what you see on shift. WHAT YOU'LL NEED • Three or more years of hands-on security or network operations, including shift work. • Good escalation judgment — when to contain, when to keep watching, and when to wake someone up. • Security+ or equivalent. CySA+ or SSCP is a plus, and we’ll fund it if you don’t have it yet. • Willingness to teach someone less experienced than you, under time pressure. WHAT WE'LL TEACH YOU • Our environment, our detections, and how the FedRAMP evidence chain fits together. • Detection engineering and tuning at a level Tier 1 doesn’t touch. • The path to Tier 3, shift lead. WHAT WE DON'T REQUIRE • A degree. • Previous corporate experience. • An active security clearance. If you hold one, or held one, that’s a plus — it is never a requirement. WHAT WE OFFER • Your schedule is fixed and published ahead of time. Shifts do not rotate. • Three consecutive days off every week on the four-day rotation schedules. • Certification costs and renewals covered, including the first attempt and a retake. • Shift premium paid on the hours you actually work in a premium window, at a published rate. • A published salary band, and a published band for the level above you. • We are a small team, so what you do is visible. You will make an impact. Compensation Range: $100k-$135k, variable annual bonus, equity and monthly premium payments. Hiring Requirement: Due to the nature of our work with federal government clients and compliance with applicable regulations, this position requires U.S. citizenship. Dual citizenship is not permitted for this role. Candidates must be able to provide documentation verifying sole U.S. citizenship status as part of the background check process and ability to pass a government background check. Any offer of employment is contingent upon the successful completion of all required pre-employment screenings, including a background check, in accordance with applicable laws and government contract requirements. Benefits & Perks Knox offers a competitive employee benefits package including Medical, Dental, Vision, Life & Disability, unlimited PEO, and an employee funded 401k plan. Please note, benefits are subject to change. We are an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. Employment decisions are made without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, disability, veteran status, or any other legally protected status. Knox is proud to support veteran hiring — we encourage veterans and transitioning service members to apply and welcome the unique skills and experience you bring.

Requirements

Must-haves

Active intrusion or suspected compromise
Service-affecting outage
Degradation and early warning signs
Customer requests and tickets
You set the pace on your shift, and you are the one who decides when something moves up the list.
Run a shift without supervision — you are the senior analyst on duty for most of it.
Take escalations from Tier 1 and see them through to containment or handover.
Coach the analyst on duty through the decision rather than taking it away from them.
Own the quality of your shift log. If the next shift has to call you, it wasn’t detailed enough.
Handle escalated customer requests and set the standard for how the queue gets worked.
Suggest detection and runbook improvements based on what you see on shift.
Three or more years of hands-on security or network operations, including shift work.
Good escalation judgment — when to contain, when to keep watching, and when to wake someone up.
Willingness to teach someone less experienced than you, under time pressure.
Our environment, our detections, and how the FedRAMP evidence chain fits together.
Detection engineering and tuning at a level Tier 1 doesn’t touch.
The path to Tier 3, shift lead.
Previous corporate experience.

Nice-to-haves

Security+ or equivalent. CySA+ or SSCP is a plus, and we’ll fund it if you don’t have it yet.
An active security clearance. If you hold one, or held one, that’s a plus — it is never a requirement.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

Platform: ashby
Effort: quick

Benefits

Benefits detected in the listing.

Dental

Vision

401k