SOC Shift Lead

Peraton • Herndon, VA

18h • $104,000 - $166,000

About The Position

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can’t be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we’re keeping people around the world safe and secure.

Requirements

• Minimum of 8 years with BS/BA; Minimum of 6 years with MS/MA; Minimum of 3 years with PhD
• Active TS/SCI clearance.
• Candidate must meet ONE of the following: Master’s degree or Ph.D. in Computer Science, Cybersecurity, Data Science, Information Systems, Information Technology, Software Engineering, or a related field; OR Relevant DoD/military training (examples: 4‑11‑C32‑255S (CP); 4C‑255N (CP); 4C‑255A (CP); M0923W1; A‑531‑4417; Cyber Defense Analyst (Advanced) Playlist); OR Relevant professional certification or equivalent experience (examples: CBROPS; CFR; CySA+; GCFA; GCIA; GICSP).
• SOC/incident response/cyber operations experience with at least 3 years in senior SOC analyst or shift lead roles.
• Proven ability to lead shift operations, make rapid escalation decisions, and produce concise operational briefings for leadership.
• Hands‑on experience with SIEM, EDR, network telemetry, and SOC tooling; strong skills in alert validation, triage, and incident documentation.
• Capability to manage analyst teams, enforce SOPs, and drive tuning/quality assurance of detection content.
• Excellent communication, coordination, and decision‑making skills under high‑pressure incident conditions.

Nice To Haves

• Prior DoD/ARNG SOC leadership or senior shift lead experience.
• Experience integrating SOC operations with CIRT, NOC, NETCOM/ARCYBER coordination, and cross-domain incident handling.
• Certifications such as CBROPS, GCFA, or equivalent advanced SOC/forensics credentials.

Responsibilities

• Supervise real‑time SOC monitoring operations during assigned shifts: coordinate analyst workload, manage escalations, and direct incident response actions.
• Review and validate high‑priority alerts and investigative findings; ensure accurate triage and appropriate escalation to CIRT/Tier‑2/3 teams.
• Communicate operational status, incident summaries, and situational awareness updates to leadership and stakeholders.
• Maintain and oversee SOC dashboards, metrics (MTTD/MTTR, alert volumes, false‑positive rates), and shift handover logs to ensure continuity.
• Guide continuous improvement initiatives: refine triage procedures, tuning activities, playbooks, and analyst training to enhance detection and response effectiveness.
• Act as senior on‑shift authority for operational decisions, coordinating cross-team actions with NOC, engineering, and mission partners during incidents.
• Ensure compliance with documented SOPs, evidence collection practices, and incident documentation standards for auditability and post-incident review.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 5,001-10,000 employees