SOC Project Manager

Revolutional, LLC•New Carrollton, MD

2d•$160,000 - $210,000•Onsite

About The Position

Revolutional is seeking an experienced SOC Project Manager to lead day-to-day Security Operations Center operations for a large federal agency. This Key Personnel role directs the SOC function through subordinate leads and oversees 24x7x365 incident management across multiple sites. The SOC Project Manager is the senior technical lead and primary operational point of contact with the client’s SOC leadership, responsible for the strategic and operational direction of incident identification, triage, analysis, response, and recovery across large on-premises and cloud environments. The role ensures continuous SOC coverage, including holiday and leave coverage, sufficient staffing for independent emergency operations at each site, and adherence to incident review, escalation, and alarm response standards. It drives incident handling across all five NIST Cybersecurity Framework functions, maintains COOP readiness, and leads operations at alternate sites when COOP is invoked. The successful candidate influences SOC practices, communicates with client executive leadership, and continually improves procedures, playbooks, and communications based on lessons learned. The position is based at the client facilities in New Carolton, Maryland, or Kearneysville, West Virginia, with onsite presence as directed. The role requires U.S. citizenship and a Top Secret clearance. Travel is listed as 0%.

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or a related field; three years of additional relevant experience may substitute for a degree.
At least 10 years of professional experience.
At least 10 years of experience running a SOC, including at least five years running a combined on-premises and cloud SOC.
At least 10 years of cybersecurity incident response experience in one or more single environments with 50,000 or more endpoints, with duties spanning all five NIST Cybersecurity Framework functions: Identify, Protect, Detect, Respond, and Recover.
Demonstrated ability to manage a function or organization through subordinate management.
Ability to influence others to accept practices and approaches and to communicate with and influence executive leadership.
Experience managing 24x7x365 SOC operations, including shift scheduling, on-call support, escalation procedures, and service level objectives.
Working knowledge of NIST SP 800-61, NIST SP 800-53, FISMA, and federal incident reporting requirements such as CISA reporting.
Experience with SIEM, SOAR, EDR, and incident ticketing or case management tools.
U.S. citizenship is required.
Top Secret clearance is required.

Nice To Haves

Experience managing a federal civilian agency SOC or incident response center.
Experience with COOP planning and execution and multi-site SOC operations.
Experience monitoring and responding to incidents in AWS and Microsoft Azure/M365 environments.
Certifications such as CISSP, CISM, GIAC (GCIH, GSOM, GCIA), or PMP.
Experience coordinating with CISA, FBI, and other law enforcement and intelligence partners.
Active Top Secret clearance.

Responsibilities

Manage the strategic and operational direction of SOC incident management and operational coordination through subordinate shift leads and analysts.
Coordinate day-to-day SOC activities with client SOC leadership, including incident escalations, operational risks, staffing coverage concerns, and service-impacting issues.
Oversee real-time alert monitoring and triage, incident report intake and coordination, incident analysis, forensic and malware analysis, and containment, eradication, and recovery activities.
Ensure incident ticket generation, assignment, acknowledgement, notification, escalation, and resolution occur within established timeframes.
Direct incident reporting coordination with oversight organizations, CISA, and other external partners on behalf of the client.
Build and manage shift schedules, on-call rosters, and staffing across multiple sites to ensure 24x7x365 coverage and reliable on-call reachability.
Ensure SOC personnel complete required training, access procedures, certifications, and on-the-job skills evaluations before receiving privileged access.
Review and approve incident analysis and forensic findings reports.
Develop and maintain COOP plans and procedures; participate in COOP exercises, contingency and disaster recovery tests, training, and exercises; and lead SOC operations at the alternate site when invoked.
Maintain and update SOC operating procedures, incident handling documentation, escalation procedures, contact lists, and knowledge content.
Coordinate SOC operations with threat intelligence, threat hunting, and SOC engineering teams to translate incident findings into detection and process improvements.
Provide recurring operational status updates, ticket trends, significant risks, and planned near-term activities to client SOC leadership and the Program Manager.
Support classified-space alarm response requirements as assigned.
Identify recurring operational issues and recommend practical improvements to incident handling processes and communications.
Support surge activation for emerging threats and major incidents.
Serve as the senior technical lead for day-to-day coordination with the client’s SOC leadership team.
Deliver continuous 24x7x365 SOC coverage with no holiday or leave gaps and sufficient staffing at each site for independent emergency operations.
Meet or exceed performance standards for incident review, escalation, and alarm response times.
Drive incident handling across the Identify, Protect, Detect, Respond, and Recover functions of the NIST Cybersecurity Framework.
Maintain COOP readiness and lead SOC operations at alternate sites when COOP is invoked.
Influence SOC practices and communicate effectively with client executive leadership.
Continuously improve incident handling processes, procedures, playbooks, and communications based on lessons learned.

Benefits

Traditional and HSA-eligible medical insurance plans.
100% employer-paid dental and vision insurance options.
100% employer-sponsored short-term disability, long-term disability, and life insurance.
5% 401(k) company matching.
Flexible schedules and teleworking options.
Paid holidays and PTO accrual plans.
Paid parental leave.
Professional development and career growth opportunities.
Team and company-wide events, recognition, and appreciation.
Competitive compensation.
Family-focused culture and a dynamic, productive work environment.