SOC Manager

Revolutional, LLC • Washington, DC

13h • $160,000 - $205,000 • Onsite

About The Position

Revolutional is seeking an experienced SOC Manager to lead a team of security analysts in a federal Security Operations Center operating 24x7x365 across on-premises and cloud environments. The SOC Manager oversees continuous threat monitoring and response, develops security policies and procedures, and ensures compliance with security standards. The position leads incident response, manages contractor SOC staff, and reports to the client’s SOC lead.

The role is onsite in Washington, DC, with telework at the client’s discretion. Travel is minimal, with occasional CONUS travel of approximately one week per year. The position requires a Public Trust clearance; candidates must be U.S. citizens and have or be able to obtain the clearance. Compensation is $160,000–$205,000.

Requirements

• Bachelor’s degree in Computer Science or an IT-related discipline.
• Ten years of experience running a SOC, including at least five years running a combined on-premises/cloud SOC.
• Ten years of cybersecurity incident response experience in one or more single environments with 50,000 or more endpoints, covering all five NIST Cybersecurity Framework functions: Identify, Protect, Detect, Respond, and Recover.
• CISSP or an equivalent certification covering a similar level of information security domains, knowledge, or experience.
• Demonstrated leadership and team management abilities to guide and motivate SOC analysts.
• At least two years of experience applying deep knowledge of cybersecurity concepts, including network security, threat intelligence, and incident response, in a SOC setting.
• Proven experience and expertise with SIEM tools and security monitoring technologies.
• Must be a U.S. citizen and have or be able to obtain a Federal Government Public Trust clearance.

Nice To Haves

• Experience managing SOC operations on federal government contracts as a contractor, including meeting contract service level agreements and reporting to government SOC leadership.
• Experience with the Elastic Security Stack (SIEM, EDR, SOAR).
• Experience with federal incident reporting requirements, including OMB M-21-31, and coordination with CISA.
• Experience managing SOC coverage of industrial control system (ICS) environments.
• Certifications such as GCIH, GSOM, or CISM.

Responsibilities

• Manage contractor SOC staff, assign and deploy personnel to meet client-identified SOC objectives, and report to the client’s SOC lead.
• Lead incident response from detection through closure, coordinating investigations, assigning work to analysts, and escalating critical incidents to relevant stakeholders.
• Direct shift managers to ensure 24x7x365 management coverage, including escalation contacts, and delegate management authority during absences.
• Develop a SOC Communications Plan for communication with the client SOC lead, client leadership, and SOC staff.
• Create and maintain SOC process documentation, incident and event playbooks, and Standard Operating Procedures.
• Train SOC staff on operating procedures and collaborate with client staff on those procedures.
• Develop and implement a quality management program to track SOC performance and assess performance changes over time.
• Assess and manage SOC resource needs to maintain optimal performance.
• Use SIEM tools to aggregate and analyze security logs for threat detection.
• Oversee real-time alert monitoring and triage, incident report intake and coordination, incident analysis, forensic and malware analysis, and containment, eradication, and recovery activities.
• Provide oversight and guidance for cyber incidents and ensure closure only after remediation and reporting activities are complete.
• Coordinate with external organizations, including CISA and partner SOCs, under the direction of the client lead.
• Coordinate fly-away incident response at remote locations when directed; the team must be able to deploy within 24 hours.
• Support the SOC Performance and Investment Metrics Program and generate reports on incidents and trends, communicating key findings to senior management.

Benefits

• Traditional and HSA-eligible medical insurance plans.
• 100% employer-paid dental and vision insurance options.
• 100% employer-sponsored short-term disability, long-term disability, and life insurance.
• 5% 401(k) company matching.
• Flexible schedules and teleworking options.
• Paid holidays and PTO accrual plans.
• Paid parental leave.
• Professional development and career growth opportunities.
• Team and company-wide events, recognition, and appreciation.

What This Job Offers

• Job Type: Full-time
• Career Level: Manager