GSOC Supervisor (Morning & Overnight Shift)

GEICO•Bethesda, MD

1d•$100,450 - $157,850•Onsite

About The Position

GEICO seeks a Supervisor – GEICO Security Operations Center (GSOC), a role combining knowledge in the principles of physical security and technical expertise with leadership capabilities to enhance our security operations center. This is a fully in office position at the GEICO Headquarters. Reporting to the Manager of GSOC & Crisis Management, you’ll supervise on-duty SOC operators that leverages specialized training in incident response and threat/intelligence monitoring tools to manage an incident or a crisis to completion and mitigate against threats to the firm and inform/escalate to crisis team members. In this role, you will leverage your experience in security operations to enhance our prevention, detection, and response while adapting to evolving threat landscapes. GSOC Supervisor is a critical role within GEICO Corporate Safety & Security team. The role plays a key part in minimizing the impact of incidents on business operations by ensuring incidents are effectively triaged, escalated, and resolved in a timely manner. The GSOC Supervisor oversees shifts operations of the GSOC, ensuring effective incident response, threat detection, and collaborate with other departments to safeguard the company's assets, personnel and brand reputation. The ideal candidate will be a proactive, resilient, and compassionate individual and has a proven track record in incident response and crisis management.

Requirements

Minimum of an associate degree or proven experience in managing a SOC or similar security operations environment.
At least two years direct experience managing and leading teams (contracted or full-time).
Experience with real-time monitoring, incident management, and crisis response within a security operations environment.
Proficiency in security platforms, including access control systems, video surveillance systems, and incident management applications.
Experience with threat intelligence, geo-risk platforms, event monitoring, mass communication tools, and familiarity with OSINT techniques and threat monitoring.
Strong situational awareness skills with the ability to assess, analyze, and respond to active threat intelligence.
Exceptional briefing, writing, and communication skills with a strong understanding of analytical writing (clear, effective, and concise).
Strong critical thinking, decision-making, and problem-solving skills, with a proactive approach to identifying and mitigating risks before escalation.
Proven leadership with the ability to communicate and influence across all levels of the organization.
Ability to quickly rebalance priorities based on evolving incidents, emerging threats, or new information.
Strong negotiation and conflict resolution skills, with the ability to make sound decisions under pressure.
Experience liaising with federal, state, and local first responder agencies.
Strong collaboration skills, working effectively across technical and non-technical teams.
Experience managing a SOC in a dynamic and rapidly changing environment.
Experience implementing and utilizing metrics-based program development and performance measurement (KPI-driven).
Ability to triage internal and external physical security and life-safety incidents and determine the appropriate level of response and escalation.
Ability to follow, apply, and enhance guidelines related to emergency response, crisis communication, and incident escalation.
Flexibility to work non-traditional hours, including nights and weekends, as required during crisis situations.
Technical competencies: MS Office Suite; ability to manage large data sets, search engines, and other relevant tools.
Associates/Bachelor’s degree in Cybersecurity, Information Security, Information Technology, Information Systems, Security Management, Risk Management, Cyber Defense, Digital Security, Cyber Intelligence, Security Studies or in related field or equivalent work experience required.
1-2 years of experience in a SOC environment.

Responsibilities

Oversee incident response efforts.
Coordinating response to internal and external physical security/life-safety events including security officer dispatch, internal incident communications, and coordination of cross-functional teams.
Oversee and manage the incident resolution process to ensure SLAs are met.
Coordinate communications with stakeholders including Technology partners during major incidents, ensuring transparency and timely updates.
Assess incident reports and coordinate appropriate actions.
Support Site Crisis Management Teams (SCMTs) and Enterprise Crisis Management Team (ECMT) as needed.
Facilitate post-incident reviews, ensuring that lessons learned are captured and action plans are developed.
Assume Incident Commander role for Crisis-level incidents per escalation policy.
Maintain a defined communication cadence during evolving incidents and crisis events.
Support operators in compiling situational reports and incident summaries.
Ensure timely triage, categorization, and prioritization of alerts and cases.
Provide oversight of incident documentation workflows, escalation channels, and resolutions.
Coordinate production and delivery of emergency notifications and mass communications.
Provide leadership and strategic direction to the GSOC team.
Set the vision for the GSOC's activities and align them with organizational goals.
Ensure timely and appropriate actions are taken in response to security incidents.
Create and maintain GSOC policies and procedures.
Lead daily SOC operations, providing task management and operational oversight.
Apply escalation matrices consistently and in accordance with policy requirements.
Manage and supervise on-duty SOC operators responsible for asset monitoring and physical security incident response.
Work with security contract vendor’s representative to manage contractors including hiring, training, and evaluating team members.
Foster a collaborative and motivated work environment.
Ensure that team members are well-trained and effectively working together.
Supervise the GSOC team to ensure seamless and continuous support to the GEICO organization.
Validate operator actions align with runbooks and site-specific requirements.
Work closely with tiered GSOC staff to detect and analyze threats.
Understand the scope of threats and vulnerabilities.
Ensure threat intelligence is effectively utilized to enhance incident response.
Manage resources within the GSOC, including staffing, tools, and technology.
Optimize resource allocation to maintain an efficient and effective SOC.
Regularly review workflows and technology assets to improve operations and reduce resource effort.
Manage user accounts, roles, and permissions across the application portfolio.
Monitor and report on system health across alarms, access control, surveillance, incident management, and other security systems.
Measure performance metrics via KPI.
Report on security operations to GCSS leadership team.
Coordinate with other departments to address security concerns.
Foster strong relationships with stakeholders.
Coordinate with site security, facilities, REFM, IT, HR, Legal, Communications, and business leadership during incidents and crisis events.
Assist in creating, updating, and delivering training materials for GSOC operators.
Support onboarding of new GSOC staff, including tools, procedures, policies, and escalation expectations.
Perform and track onboarding sessions and refresher training for existing staff.
Conduct scenario-based drills (e.g., active threat, severe weather, bomb threat, medical emergency, workplace violence).
Identify gaps in SOPs during real-world incidents and propose process improvements.