NOC / SOC Shift Lead - 2nd Shift

Leidos • Hampton, VA

13d • Onsite

About The Position

The NOC / SOC Shift Lead serves as the senior technical authority and shift supervisor for after-hours network operations and cybersecurity monitoring, blending NOC and SOC functions across DoD networks. The position independently prioritizes and leads responses to significant incidents, coaches junior technicians, and owns shift turnover to ensure continuity with day-shift teams and leadership.

This role requires daily on-site work at Langley AFB, Virginia. Core hours are typically 4:00 PM to 12:00 AM, with willingness to work evening and rotational shifts, including weekends and holidays.

Requirements

• Bachelor’s degree with 4 or more years of experience, or a Master’s degree with 2 or more years of experience; additional experience may be considered in lieu of a degree.
• Active DoD TS/SCI clearance.
• DoD 8140/8570 IAT Level II baseline certification, such as CompTIA Security+ CE.
• At least 4 years of hands-on experience in IT security, network operations, or a related field, including some experience leading or mentoring a shift team.
• Ability to prioritize competing incidents, make independent risk-based decisions with minimal oversight, and coordinate a small team during off-hours coverage.
• Working proficiency with enterprise SIEM/EDR and monitoring tools, such as Splunk, CrowdStrike, Microsoft Sentinel, or SolarWinds.
• Willingness to work evening and rotational shifts, including weekends and holidays.

Nice To Haves

• CSSP Analyst-aligned certification, such as CySA+, CEH, or GCIH.
• Exposure to Security Onion, Juniper SSR, Cisco switching, Wireshark, ServiceNow, or Jira Service Manager.
• Advanced certification such as CySA+, GCIA, or CEH.
• Previous shift-lead or team-lead experience in a DoD, military, or cleared NOC/SOC environment.
• Experience refining shift SOPs, playbooks, or escalation procedures based on operational trends.

Responsibilities

• Serve as the senior point of contact for the second-shift NOC/SOC team, assigning and prioritizing alerts and ensuring adequate shift coverage.
• Oversee SIEM and network performance dashboards to detect security threats and infrastructure outages.
• Lead incident triage, distinguish real incidents from false alarms, direct initial diagnostics, and contain active network or security anomalies.
• Escalate high-severity incidents to Tier 2/3 engineering teams or Incident Responders.
• Author or review detailed shift-handover reports for day-shift leadership.
• Oversee routing and connectivity troubleshooting, backup restorations, and software patch management during off-peak hours.
• Coach and train junior NOC/SOC technicians, review tickets and reports for accuracy, and reinforce shift procedures.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior