SOC Chief (R-00159)

True Zero Technologies•Arlington, VA

2d•Onsite

About The Position

This role will direct security monitoring, incident response coordination, operational reporting, and risk and issue management while ensuring SOC activities support broader continuous monitoring and federal cybersecurity compliance objectives. This position calls for a senior operator who can manage high-pressure incidents, lead response efforts as incident commander, and maintain strong coordination with federal stakeholders while ensuring timely, accurate, and complete operational deliverables.

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field; or equivalent experience
7–10 years of experience in SOC operations and incident response
Experience in SOC management and in an incident response commander role
Strong experience managing cyber defense operations in fast-moving environments
Experience overseeing operational risk, issue tracking, schedules, and performance management
Experience applying MITRE ATT&CK and the Cyber Kill Chain to alert triage, threat hunting, incident reporting, and detection improvement
Ability to direct incident handling, escalation, and cross-team coordination
Strong written and verbal communication skills, including leadership briefings
Ability to work effectively in classified environments within government controlled secure facilities
Strong leadership, judgment, and decision-making skills under pressure
CASP, GSEC, GSLC, CISSP, CEH, CISM, CISA, GCIA, GCIH, or comparable certifications
Top Secret/SCI Clearance (Final)

Responsibilities

Oversee the Security Operations Center and coordinate all activities performed under the SOC task area
Serve as the primary incident commander for cybersecurity incidents
Lead SOC operations, incident response coordination, and operational decision-making
Manage project schedules, risk registers, and risk and issue mitigation strategies for SOC and incident response activities
Ensure deliverables, data, and reporting are accurate, complete, and timely
Lead information security gap analysis reviews
Perform administrative oversight of SOC operations and team performance
Ensure effective coordination, collaboration, and communication with OIS federal personnel
Support continuous monitoring objectives through effective operational security monitoring and reporting
Use the Cyber Kill Chain to support hunt planning, alert reporting, incident analysis, and communication of adversary progression through an event or intrusion
Use MITRE ATT&CK to describe adversary behaviors, identify defensive visibility or detection gaps, and recommend remediation or monitoring improvements
Support continuous operational improvement across SOC and incident response functions
Operate effectively in high-pressure environments with changing priorities

Benefits

Competitive salary, paid twice per month
Best in class medical coverage
100% of medical premiums covered by True Zero
Company wide new business incentive programs
Contribution Incentives (i.e. white papers, blog posts, internal webinars, etc.)
3 weeks of PTO starting + 11 Paid Holidays Annually
401k Program with 100% company match on the first 4%
Monthly reimbursement of Cell Phone and Home Internet costs
Paternity/Maternity Leave
Investment in training and certifications to broaden and deepen your technical skills