Security Operations Center (SOC) Lead - Secret Clearance

V2X•Orlando, FL

12d•Onsite

About The Position

Responsible for overseeing cybersecurity operations, incident response, and defensive cyber measures for centralized and geographically disbursed locations in support of Warfighter Training Readiness Solutions (W-TRS) program, U.S. Army CPE ST3. Oversee day-to-day activities, ensuring 24/7 monitoring and response to cyber threats. Supervise and lead SOC analysts, ensuring adherence to best practices and operational procedures. Implements proactive defense strategies. Enforces compliance & reporting, ensure compliance with DoW cybersecurity policies and generate reports for FISMA, ConMon, and security incidents. Tool maintenance and implementation, ensure enterprise toolsets are functioning, while driving adoption of new cybersecurity tools and automation to enhance efficiency to overall security posture.

Requirements

Bachelor's degree in Cybersecurity and Information Assurance; Advanced degree(s) preferred.
8570/8140 Certification – IAT II/III and / or Cybersecurity Roles; Intermediate/ Advanced (CASP / CISSP Preferred)
Years of Experience: (8+BA/BS or 1+MA/MS) or (12+AA/No Degree)
Experience working with DoD / U.S. Army/ Federal Government
Experience as a Cyber Engineer
5+ years of Incident handling experience
4+ years of supervising and/or managing teams (Preferred)
Active U.S. Government Secret Security Clearance
U.S. Citizenship required for security clearance
Experience with software/tools: Assured Compliance Assessment Solution (ACAS), Splunk Enterprise, Kiwi Syslog, Trillex, Endpoint Security Solution (ESS), Cisco Adaptive Security Appliance (ASA) Firewalls and Firepower IPS, DISA SRGs, STIGS, DISA STIG Viewer, Evaluate STIG

Nice To Haves

Advanced degree(s) preferred.
CASP / CISSP Preferred
4+ years of supervising and/or managing teams

Responsibilities

Support the implementation of, to include the production of documentation and associated artifacts with the implementation of, Cybersecurity requirements as identified in DoDI 8510, 8140, and AR 25-2 based upon Risk Management Framework (RMF)
Ensure all sites execute monthly continuous monitoring and compliance testing to validate the current configurations, against the documented security configuration baseline, and report compliance.
Ensure SOC provides 24 hours a day monitoring for training rotations and exercises for remote
Ensure that SOC verifies all assets have a representative security configuration baseline documented in Defense Information Systems Agency (DISA) STIG checklist and Plan of Action and Milestones (POA&M) form.
Direct patching and IA Vulnerability Alert (IAVA) for supported baselines
Standardizes analysis and correlation of audit records using the Security Incident & Event Management (SIEM) tools across different repositories, to include backups.
Enforcement of enterprise monitoring and controls communications at the external boundary for all sites and at key internal boundaries within the
Enforcement of enterprise monitoring, and controls for unauthorized software, to include mobile code through the continuous monitor
Enforcement of all enterprise end point security software update at appropriate schedule within operational
Ensure communication between remote sites with local cybersecurity governance personnel in accordance with the Incident Response Plan and security documentation.
Ensure all sites are performing functional and security testing in support of Assessment and Authorization (A&A)
Ensure all sites configure and enable security features
Support annual FISMA requirements for all sites, to support auditors with actual and historical data from