Incident Response 2nd Shift Lead
About The Position
Revolutional is hiring a full-time Cybersecurity Operations Center (CSOC) 2nd Shift Lead to help safeguard the Department of Veterans Affairs’ digital assets and respond to potential cyber threats. The role supports the Incident Response team in investigating and mitigating advanced and complex cyber incidents. The position is onsite daily in Martinsburg, West Virginia, or Austin, Texas, and works the second shift: 2:30 p.m.–11:00 p.m. Eastern or 1:30 p.m.–10:00 p.m. Central, Sunday through Thursday. The role requires the ability to obtain and maintain a Federal Government Public Trust clearance and is open to U.S. citizens or legal permanent residents. The lead provides guidance to SOC analysts, oversees incident triage and response, and helps ensure compliance with service-level agreements and standard operating procedures. The lead also contributes technical expertise to investigations, supports analyst training, maintains thorough incident documentation, and works with SOC management and cross-functional teams to improve tools, workflows, and processes.
Requirements
- Bachelor's degree in computer science, cybersecurity, information technology, or a related field, or equivalent work experience.
- At least 5 years of experience supporting large-scale IT-related projects.
- At least 3 years of experience supporting incident response in an enterprise-level Security Operations Center.
- Deep understanding of cybersecurity principles and incident response methodologies, with a proactive approach to working in a high-pressure environment.
- Strong experience with security technologies, including SIEM, IDS/IPS, EDR, and network monitoring tools.
- Experience with enterprise ticketing systems such as ServiceNow.
- Excellent analytical and problem-solving skills.
- Ability to work independently and as part of a team to identify errors, pinpoint root causes, and devise solutions with minimal oversight.
- Ability to learn quickly and function in multiple capacities.
- Strong verbal and written communication skills.
- Must be a U.S. citizen or legal permanent resident.
- Ability to obtain and maintain a Federal Government Public Trust clearance.
- Must work onsite daily in Martinsburg, WV, or Austin, TX, on the specified second shift, Sunday through Thursday.
Nice To Haves
- Industry certifications such as CISSP, GCIH, GCFA, CEH, or equivalent are highly desirable.
Responsibilities
- Provide leadership and guidance to SOC analysts during the shift and foster a collaborative team environment.
- Conduct regular team meetings to discuss priorities, updates, and challenges.
- Ensure adherence to incident response and resolution SLAs; monitor and report on performance indicators and compliance requirements.
- Work with management to implement operational improvements and efficiencies.
- Oversee triage of incoming security alerts and incidents, prioritizing them by severity and potential impact.
- Collaborate with other teams to support timely and effective incident response.
- Provide technical expertise and guidance to Tier 1 and Tier 2 analysts investigating incidents of varying complexity.
- Collaborate with the incident response team to analyze and interpret technical data.
- Ensure analysts understand and follow established standard operating procedures; train analysts on new procedures and tools.
- Identify process-improvement opportunities and work with SOC management to enhance tools, processes, and workflows.
- Stay informed about industry trends and emerging threats to improve SOC capabilities.
- Ensure accurate and detailed documentation of incident response activities, analysis, actions taken, and lessons learned.
- Collaborate with forensics, threat intelligence, IT, and network administrators.
- Clearly communicate technical information and incident updates to management and stakeholders.
Benefits
- Traditional and HSA-eligible medical insurance plans.
- 100% employer-paid dental and vision insurance options.
- 100% employer-sponsored short-term disability, long-term disability, and life insurance.
- 5% 401(k) company matching.
- Flexible schedules and teleworking options.
- Paid holidays and PTO accrual plans.
- Paid parental leave.
- Professional development and career growth opportunities.
- Team and company-wide events, recognition, and appreciation.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
