SOC Project Manager

Amentum•Columbia, SC

39d•$155,000 - $175,000•Onsite

About The Position

Purpose and Impact: Come be a part of an exciting and ever-changing program that provides a comprehensive range of state-of-the-art solutions and hands-on assistance in designing, implementing, managing, and sustaining operations across various network environments for our customer. We provide an environment that fosters and supports innovation and valuing “outside-the-box” thinking to solve complex problems. There are several training opportunities for team members that want to learn new technologies and stay current with their technical skillset. We are a highly technical group and nurture growth, with a technical culture of cross-trained teammates with opportunities to develop additional skillsets. Work Schedule: 8hrs/day, 5days per week, all onsite. Must be able to support occasional Thursday night patching after hours (starting at 5pm). Occasional travel will be available. Essential Responsibilities: The SOC Project Manager will be responsible for planning, directing, and coordinating individuals responsible for the delivery of cybersecurity operations center services; identifying and assembling the optimal combination of personnel, technologies, and methodologies to meet current and near-term requirements of the organization. Drive implementation and improvement of new tools, capabilities, frameworks, and methodologies across all teams within the SOC. Instill and reinforce industry best practices in the domains of incident response, cybersecurity analysis, case and knowledge management, and SOC operations. Promote and drive implementation of automation and process efficiencies. Must possess a deep technical understanding of core current cybersecurity technologies as well as emerging capabilities. Hands-on cybersecurity experience (Protect, Detect, Respond and Sustain) within a Computer Incident Response organization including prior experience performing large-scale incident response. Demonstrated understanding of the life cycle of cybersecurity threats, attacks, attack vectors and methods of exploitation with an understanding of intrusion set tactics, techniques and procedures (TTPs). The SOC Project Manager must be proficient in core project management disciplines including scope, schedule, budget, resources, quality and risk management, reporting and metric development/tracking. Work Environment, Physical Demands, and Mental Demands: Standard work environment

Requirements

8+ years of experience working within and/or managing a Security Operations Center
Experience managing personnel to align cybersecurity priorities for small to mid-sized teams
Ability to effectively communicate and interface with Senior Leaders and cybersecurity peers
Ability to translate technical requirements into actionable project plans
Ability to interpret and communicate security metrics, KPIs, and SOC performance indicators
Previous experience participating in or managing an Incident Response process
Experience working within a virtualized environment (VMware, Hyper-V, etc)
Experience working with classified enterprise networks
Experience working within ticketing systems (i.e. Jira, ServiceNow, etc.)
Ability to effectively develop, manage, and provide feedback on technical documentation
Strong understanding of SIEM technologies (Splunk preferred)
Familiarity with threat detection methodologies (MITRE ATT&CK and SOC maturity models)
Strong understanding of log management, pipeline management, and data normalization
Familiarity with endpoint security tools, network security monitoring, and threat intelligence platforms
Experience coordinating or supporting SOC tool deployments, upgrades, and/or integrations
Required IAT Certs: one or more of the following: CISM, CISSP, or CCISO
Clearance Required: TS/SCI

Nice To Haves

Experience establishing a SOC
PMP or equivalent
Additional security-relevant Vendor Certifications
Prior Military experience

Responsibilities

planning, directing, and coordinating individuals responsible for the delivery of cybersecurity operations center services
identifying and assembling the optimal combination of personnel, technologies, and methodologies to meet current and near-term requirements of the organization
Drive implementation and improvement of new tools, capabilities, frameworks, and methodologies across all teams within the SOC
Instill and reinforce industry best practices in the domains of incident response, cybersecurity analysis, case and knowledge management, and SOC operations
Promote and drive implementation of automation and process efficiencies
reporting and metric development/tracking