Summary
Security Operations Analyst
Tysons Corner, VA
Are you ready to enhance your skills and build your career in a rapidly evolving business climate? Are you looking for a career where professional development is embedded in your employer’s core culture? If so, Chenega Military, Intelligence & Operations Support (MIOS) could be the place for you! Join our team of professionals who support large-scale government operations by leveraging cutting-edge technology and take your career to the next level!
Astraeus Operations (AO) is an SBA-certified 8(a) Small Disadvantaged Business (SBD) subsidiary of the Chenega Corporation, an Alaska Native Corporation (ANC). We are a small business with large business capabilities due to our shared-services Program Management Office (PMO) structure. Through our ISO 9001:2015 certification, we can accomplish the full range of contract services including financial, human capital, recruiting, procurement, security, and technical resources to achieve contract mission requirements. As a result, our ‘small business – big capability’ dynamic benefits our clients through consistent communications and straight-lined workflows, ensuring our accountability to our clients for successful mission fulfillment. In plain terms, our clients gain a team that’s on the same page to achieve and support the client’s mission. We vigorously respond to clients’ requests without additional costs, delays, or inefficiencies that are often experienced with larger, more cumbersome organizations. AO is eligible for sole source, direct awards up to $100M for DOD and up to $25M for other federal agencies, without J&A. Astraeus is the easy button for a client wishing to take advantage of the rapid, agile, and flexible sole source procurement option. Combined with the shared PMO services, Astraeus offers highly competitive labor rates to fulfill day-to-day contract operations.
The SecOps Analyst provides on-site, 24/7/365 Tier 1 security monitoring, event analysis, and incident triage for Google Public Sector’s (GPS) sovereign, classified, and controlled environments. Initial support covers Google Distributed Cloud (GDC) Air-Gapped security fabrics and Controlled Unclassified Information (CUI) domains, with scope designed to scale across current and future Google sovereign infrastructure, appliances, and air-gapped offerings. The analyst monitors SIEM/EDR alerts, enriches and correlates events for high-confidence triage, and retains end-to-end alert ownership, customer communication, and incident documentation in coordination with SecOps Managers and Google SecOps engineering.
Responsibilities
- Monitor GDC Air-Gapped security fabrics and CUI domains using Google Managed SecOps tools; analyze events in Splunk, ELK, designated SIEM systems, and EDR tools.
- Provide initial GPS customer and incident-reporting support via email and support portals. Acknowledge alerts within 5 minutes of creation; deliver a First Meaningful Response (FMR) within 15 minutes for High/Critical alerts and 25 minutes for all others.
- Collect and analyze event descriptions, affected-system details, security telemetry, and related evidence. Assess severity and operational impact and correlate events for high-confidence triage. Develop evidence-based disposition recommendations and escalate confirmed threats to the appropriate Google SecOps representative in accordance with established procedures and runbooks.
- Own and actively manage ServiceNow incidents and investigations, including analysis, customer updates, follow-on actions, and required government incident-report drafts. Transfer ownership only with explicit Google manager approval; coordinate incident response and required EDR tooling with Google SecOps.
- Before Google on-call consults, evaluate observed activity, results of playbooks and investigative queries, IOCs, and supporting technical evidence to develop a proposed incident disposition and recommended next steps. For active High/Critical shift handoffs, document current status, analysis completed, analytical findings, and recommended next steps; immediately accept incoming incidents without rejection.
- Provide hands-on-keyboard accreditation support to demonstrate and validate playbooks, runbooks, IT infrastructure, and Data Center operations. Evaluate alert effectiveness and playbook performance, identify detection or workflow gaps, and develop tuning and process improvement recommendations.
- Support continuous coverage during holidays and severe or inclement weather; coordinate with teammates to keep at least one FTE in each occupied SecOps room. Answer and route SecOps calls, seek on-call guidance as needed, and respond to SecOps virtual communications within 15 minutes.
- When designated live Queue Manager, monitor alert timers and intervene at least 5 minutes before response targets expire. As designated senior analyst, pre-screen off-hours consults for next-business-day Manager review.
- Participate in requested customer situational awareness calls; assess reported information for security and operational significance, identify potential impacts requiring further investigation or response, and communicate relevant findings and tasking through designated channels using appropriate unclassified working when required.
- Maintain records and supply weekly activity report inputs: alert response SLA compliance, triage dispositions, playbooks validated/updated, noisy alerts and tuning recommendations, work-item quality flag trends, and shift staffing.
- Other duties as assigned.
Qualifications
- 3+ years of experience in security operations (SOC), cybersecurity, or systems administration.
- Hands-on experience with SIEM, IDS, EDR, and case management or ticketing tools.
- Technical experience supporting Windows and Linux operating systems, networking infrastructure, scripting, and security application troubleshooting.
- Possess and maintain an active DoD 8140 Cyber Defense Analyst (CSSP Analyst) role-qualifying certification (e.g. CySA+, GCIA, GCIH, CEH, or CISSP).
- Successfully complete Google’s extended workforce onboarding process and maintain required government-contract compliance, including mandatory training.
- Active TS/SCI with Full Scope Polygraph
- Successfully pass background and drug screening
Preferred Qualifications:
- Bachelor’s degree in cybersecurity or computer science, or equivalent practical experience.
- Experience in a dedicated SOC, including event analysis using Splunk, ELK, or other SIEM systems.
- Hands-on security detection development and alert tuning in partnership with Tier 2 and Tier 3 engineering teams.
- Experience compiling threat reports that translate complex indicators of compromise (IOCs) into narrative overviews.
- Advanced understanding of LAN/WAN topologies, Google Cloud Platform, Kubernetes, and air-gapped computing environments.
- Experience operating in classified SCIF environments, handling sensitive or classified data, or supporting cloud environments.
- Elastic Certified SIEM Analyst or Splunk Core Certified User certification.
Knowledge, Skills and Abilities:
- General knowledge of network analysis, vulnerability scanning (e.g., Nessus), security hardening best practices (e.g., DISA STIG), and vulnerability landscapes (e.g., OWASP Top 10).
- Foundational understanding of LAN/WAN topologies, Kubernetes, and air-gapped computing environments.
- Clear written and verbal communication with customers, teammates, and engineering teams; ability to translate technical findings into concise updates, diagnostic summaries, and incident reports.
- Ability to collaborate in classified, mission-critical environments, protect sensitive information, and follow security procedures, approved runbooks, and escalation protocols.
- Disciplined documentation and time management; ability to maintain accurate incident and shift records, prioritize alerts by severity, meet response timelines, and adapt to changing mission needs.
- Strong analytical and investigative skills to interpret SIEM/EDR alerts, correlate events and security telemetry, identify indicators of compromise, assess severity and operational impact, develop evidence-based incident dispositions, and exercise sound judgment in recommending response actions or escalation.
- Ability to retain incident ownership during technical consults, track follow-on actions, and maintain customer updates in coordination with SecOps Managers and Google SecOps.
- Ability to evaluate detection effectiveness and investigative workflows, identify noisy alerts and playbook gaps, and develop practical recommendations for alert tuning, playbook improvement, and operational process enhancement.
- Ability to support a 24/7/365 operation, including overnight, weekend, and holiday shifts, while coordinating room coverage and providing structured, timely shift handoffs.
How you’ll grow At Chenega MIOS, our professional development plan focuses on helping our team members at every level of their careers to identify and use their strengths to do their best work every day. From entry-level employees to senior leaders, we believe there’s always room to learn.
We offer opportunities to help sharpen skills in addition to hands-on experience in the global, fast-changing business world. From on-the-job learning experiences to formal development programs, our professionals have a variety of opportunities to continue to grow throughout their careers.
Benefits
At Chenega MIOS, we know that great people make a great organization. We value our team members and offer them a broad range of benefits. Learn more about what working at Chenega MIOS can mean for you.
Chenega MIOS’s culture Our positive and supportive culture encourages our team members to do their best work every day. We celebrate individuals by recognizing their uniqueness and offering them the flexibility to make daily choices that can help them be healthy, centered, confident, and aware. We offer well-being programs and continuously look for new ways to maintain a culture where we excel and lead healthy, happy lives.
Corporate citizenship Chenega MIOS is led by a purpose to make an impact that matters. This purpose defines who we are and extends to relationships with our clients, our team members, and our communities. We believe that business has the power to inspire and transform. We focus on education, giving, skill-based volunteerism, and leadership to help drive positive social impact in our communities. Learn more about Chenega’s impact on the world. Chenega MIOS News- https://chenegamios.com/news/
Tips from your Talent Acquisition Team We want job seekers exploring opportunities at Chenega MIOS to feel prepared and confident. To help you with your research, we suggest you review the following links: Chenega MIOS web site - www.chenegamios.com Glassdoor - https://www.glassdoor.com/Overview/Working-at-Chenega-MIOS-EI_IE369514.11,23.htm LinkedIn - https://www.linkedin.com/company/1472684/ Facebook - https://www.facebook.com/chenegamios/
#Astraeus Operations
Estimated Salary/Wage
USD $170,000.00/Yr. Up to USD $175,000.00/Yr.
