Our team in Chesapeake, VA, has an immediate need for a Security Operations Center Lead to be responsible for leading the day-to-day operations of the Security Operations Center, including cybersecurity monitoring, alert triage, incident response coordination, operational reporting, and continuous improvement and maturation of SOC processes. This position serves as the primary operational lead for the SOC and provides technical supervision, mentorship, and professional development for analysts and incident handlers. The position ensures that security events are investigated, documented, escalated, and remediated in accordance with approved procedures, response playbooks, and customer priorities. The lead collaborates closely with the MNOC leads and other government stakeholders and external partners to protect systems, data, services, and the fleet.
This position is located in Chesapeake, VA and requires an active Secret clearance.
Supervises a small team both in Chesapeake, VA and Pensacola, FL.
Job Description:
- Leads day-to-day Security Operations Center (SOC) activities, including security monitoring, alert triage, investigation, escalation, incident response coordination, operational reporting, and analyst shift oversight.
- Participates in after-hours incident response, emergency escalation, and on-call support as needed to address significant cybersecurity events or operational requirements.
- Develops or supports cybersecurity exercises, tabletop scenarios, and incident response drills to evaluate readiness and improve coordination among SOC personnel, NOC teams, and stakeholders.
- Performs security monitoring, investigation, and incident response activities as needed to maintain SOC operations during periods of reduced student staffing or elevated operational demand.
- Maintains and improves detection, monitoring, and response capabilities across security technologies, including SIEM, endpoint detection and response (EDR), cloud security platforms, and related cybersecurity tools.
- Develops, maintains, and updates SOC playbooks, standard operating procedures, workflows, and documentation to support consistent and effective security operations.
- Maintains security operations documentation and reports on security metrics, incident trends, operational performance, and student program outcomes.
Job requirements
- This position requires five years of directly related full-time experience
- Experience with SOC operations, security monitoring, incident response, or related cybersecurity functions, including conducting cybersecurity investigations, alert triage, or security event analysis.
- Experience with enterprise SIEM, EDR, or similar platforms preferred.
Education and Certification
- Bachelor's degree from an accredited institution in Cybersecurity, Computer Science, Informatics, Information Systems, or related field and five years of full-time experience directly related to the job functions.
- CISSP, CISM, Security , GCIH, GCIA, CISA, or similar certifications desired
The anticipated salary range for this role is $150,000 to $160,000 annually. The anticipated salary range for this position is provided in accordance with applicable pay transparency laws. The final starting salary will be determined based on a variety of job-related factors, including the selected candidate's qualifications, skills, relevant experience, education, certifications, and work location (where applicable), as well as internal equity and market considerations.
We use E-Verify to confirm the identity and employment eligibility of all new hires.
Demo