AWS SOC Analyst/Engineer

The most security-conscious organizations trust Telos Corporation to protect their vital IT assets. The reputation of our company rests on the quality of our solutions and the integrity of our people. Explore what you can bring to our solutions in the areas of cyber, cloud and enterprise security.

Be a part of the Telos culture and see what sets us apart! Telos offers an excellent compensation package with benefits that include generous paid time off, medical, dental, vision, tuition reimbursement, and 401k. Our employees enjoy more than just a great work environment!

This position will be based at Ashburn, VA

Security Monitoring & Analysis
• Monitor and analyze security alerts from AWS CloudTrail, GuardDuty, Security Hub, and Config
• Investigate security incidents and perform initial triage and classification
• Document findings and escalate incidents according to established procedures
• Maintain situational awareness of current threat landscape and attack vectors

Incident Response
• Execute incident response procedures for security events in AWS environments
• Collect and preserve digital evidence following proper chain of custody procedures
• Coordinate with senior analysts and management during major security incidents
• Update incident tickets in ServiceNow with detailed analysis and remediation steps

ServiceNow Operations
• Create, update, and manage security incident tickets in ServiceNow
• Follow established workflows for incident assignment and escalation
• Generate reports and metrics on security operations activities
• Participate in ServiceNow process improvement initiatives

AWS Security Operations
• Assist in monitoring multi-account AWS environments for security compliance
• Review and analyze AWS security findings and configuration drift alerts
• Support implementation of security controls and monitoring enhancements
• Maintain knowledge of AWS security best practices and services

Continuous Learning & Development
• Stay current with emerging threats, attack techniques, and security technologies
• Participate in training programs and professional development opportunities
• Contribute to playbook development and process documentation
• Support knowledge sharing within the SOC team

Education & Experience
• Bachelor's degree in Information Security, Computer Science, IT, or related field
• 2-5 years of experience in cybersecurity, network security, or SOC operations
• 1-3 years of hands-on experience with AWS services and security tools
• Experience working with ticketing systems (ServiceNow preferred)

Security Clearance
• Must be able to obtain and maintain a U.S. Government security clearance

Technical Skills
• Working knowledge of AWS security services (GuardDuty, Security Hub, CloudTrail, Config)
• Basic understanding of ServiceNow platform and incident management processes
• Familiarity with SIEM platforms and log analysis
• Understanding of network protocols, firewalls, and intrusion detection systems
• Basic scripting knowledge (Python, PowerShell, or Bash)
• Knowledge of common attack vectors and incident response procedures

Core Competencies
• Strong analytical and problem-solving skills
• Excellent written and verbal communication abilities
• Detail-oriented with strong documentation skills
• Ability to work in fast-paced, 24/7 operational environment
• Team player with willingness to learn and adapt
• Ability to handle multiple priorities and work under pressure

Preferred Qualifications
• Experience with DHS cybersecurity policies and regulations (HIGHLY PREFERRED)
• AWS security-related certifications (Cloud Practitioner, Security Specialty)
• ServiceNow Certified System Administrator (CSA)
• Security certifications such as Security+, CySA+, GCIH, or GSEC
• Experience with federal compliance frameworks (FedRAMP, FISMA, NIST 800-53)
• Previous experience in government or regulated industry environments
• Knowledge of threat intelligence platforms and threat hunting techniques
• Experience with vulnerability management tools and processes

The successful candidate must meet eligibility requirements to access sensitive information, which requires US citizenship.

Telos maintains a drug-free workplace and will conduct drug testing on all applicants who have accepted an offer of employment.

Telos Corporation participates in the E-Verify program. Therefore, any employment with Telos will also be contingent upon confirmation from the Social Security Administration ("SSA") and/or the Department of Homeland Security ("DHS") of your authorization to work in the United States. Telos offers excellent compensation packages including salary commensurate with experience and benefits to meet your needs for today and the future.

Telos Corporation and its subsidiaries are committed to equal opportunity for all, without regard to race, religion, color, national origin, citizenship, sex, sexual orientation, gender identity, age, veteran status, disability, genetic information, or any other protected characteristic. Telos Corporation will make reasonable accommodations for known physical or mental limitations of otherwise qualified employees and applicants with disabilities unless the accommodation would impose an undue hardship on the operation of our business. If you are interested in applying for an employment opportunity and feel you need a reasonable accommodation pursuant to the ADA, please contact us at 1-800-283-1911. If you require relay service assistance, please click on the following link to review information on your state's relay service: https://www.fcc.gov/accessibility.

Telos Corporation is an EEO/AA employer.