About the role

As a SOC Analyst at KSG you will be the first line of defense for federal and state systems, monitoring alerts, investigating incidents, and tuning detections to cut noise. You will work alongside senior responders and threat hunters in a collaborative, mission-focused team.

Responsibilities

• Monitor SIEM/SOAR alerts and triage security events
• Investigate and document incidents end to end
• Tune detection rules to reduce false positives
• Support incident response and escalation
• Contribute to threat hunting using MITRE ATT&CK

Requirements

• 3+ years in a SOC or security operations role
• Hands-on SIEM experience (Splunk, Sentinel, or similar)
• Solid understanding of networking and common attacks
• Ability to obtain a U.S. government clearance

Required skills

Preferred qualifications

• Security+ , CySA+, or GCIH
• Scripting (Python/PowerShell)
• Experience in a federal environment

Benefits

• Comprehensive medical, dental, vision
• 401(k) with match
• Paid certifications and training
• Generous PTO and federal holidays