Job Requirements
Remote Washington, DC Columbia, SC
Top Secret/SCI Polygraph Unspecified
Mid Level Career (5+ yrs experience)
Salary not specified
Join Premium to unlock estimated salaries 
Job Description
Responsibilities:
Qualifications
Required:
Desired:
Clearance:
Location:
- Serve as the foremost technical authority and point of escalation regarding monitoring, detection, analysis, and incident response
- Be the primary technical leader and change agent for the planning and execution of continual improvement initiatives including but not limited to: knowledge management, documentation, automation, tuning, lessons learned, QA/QC, and metrics
- Ensure a full library of Plans, SOPs, and playbooks exists for all SOC functions
- Create and implement a training plan to ensure all Analysts on your team have superior levels of knowledge and experience to triage and investigate all types of alerts
- Maintain constant awareness of the security posture of the organization versus internal and external threats, notifying stakeholders of changes, trends, and immediate threats or vulnerabilities; make recommendations to more effectively monitor, defend, and continuously improve the security posture of the organization
- Define, document, execute, measure, monitor, and improve SOC processes, paying special attention to integration points with other internal and external teams
- Write and publish after-action reviews; ensure lessons learned result in action items that are resolved and closed in a timely manner
- Build and implement a robust Cyber Threat Hunting program
- Correlate and contextualize Cyber Threat Intelligence; identify actionable indicators of compromise; disseminate and make recommendations to senior leadership regarding courses of action
- Plan and execute test exercises; recommend modifications or adjustments based on results
- Author, brief, and submit daily, weekly, and monthly status reports and other deliverables as required
- Remain abreast of current and emerging cybersecurity tools and technologies
- Other duties as assigned
Qualifications
Required:
- Bachelor's degree (or an additional 4 years of related experience)
- At least one advanced cybersecurity certification is required (e.g., CISSP, CISM, CEH, GIAC/SANS, etc)
- Minimum five (5) years of SOC experience in a Tier 3, Shift Lead, SOC Lead, or similar role including:
- Advanced knowledge and experience providing technical leadership during major incidents (i.e., in an "incident commander" role)
- Advanced technical understanding of current and emerging cybersecurity tools and technologies
- Technical understanding of the full cyber threat/attack lifestyle, including attack vectors, methods, and TTPs
- Understanding of and experience with intelligence-driven defense
- Mature understanding of industry SOC standards and best practices (e.g., OMB, NIST, US-CERT, etc.)
- Strong leadership, written and verbal communication, customer service, and analytical and problem-solving skills are required
- Ability to provide steady leadership in a high-pressure environment with changing priorities.
Desired:
- Active Program Management certification OR ability to obtain one within 90 days of hire.
Clearance:
- Top Secret Clearance, SCI Eligibility required
Location:
- This is a hybrid role that can be based in Washington, DC but would require travel to Columbia, SC up to one week per quarter.
group id: 91085617
