Security Operations Center (SOC) Lead

Job OverviewSecurity Operations Center (SOC) LeadJob Locations: US-VA-HerndonPosition Category: Cyber SecurityClearance: Top Secret/SCIResponsibilitiesWe are seeking a highly skilled and innovative Security Operations Center (SOC) Lead to join our team in the greater DMV area, supporting the Army National Guard.Manage day‑today SOC operations: staffing, shift coverage, case handling, escalation, and incident lifecycle management.Oversee incident coordination with CIRT, NOSC, ARCYBER, USCYBERCOM, and engineering teams; implement playbooks and countermeasures during incidents.Ensure investigative quality: review cases, validate threat analysis, enforce documentation/runbook standards, and oversee evidence preservation.Lead detection engineering efforts: rule/signature/content development, tuning, enrichment, and mapping to MITRE ATT&CK.Maintain continuous monitoring aligned with STIG/IAVM/RMF requirements and ensure SOC support for defensive cyber operations.Develop and maintain SOC SOPs, playbooks, escalation matrices, COOP procedures, and communications plans.Coordinate SOC reporting and notifications to RCCNG, ARCYBER, USCYBERCOM, and other stakeholders; produce situational awareness products and executive briefings.Drive analyst training, exercises, purple teaming, and tool adoption; mentor Tier II/III analysts and refine workflows/automation.Support audits, inspections, accreditation activities, and evidence preparation for RMF/ATO and related reviews.Monitor SOC KPIs (MTTD, MTTR, case quality, false‑positive rates) and implement continuous improvement actions.#ENOCSQualificationsRequired QualificationsMinimum of 8 years with BS/BA; Minimum of 6 years with MS/MA; Minimum of 3 years with PhDClearance: TS/SCI (active)Education/Training/Certification: Candidate must meet ONE:Master's or Ph.D. in Computer Science, Cybersecurity, Data Science, Information Systems, Information Technology, or Software Engineering; ORRelevant DoD/Military training (e.g., 4C255N/4C255S/4C255A, Cyber Defense Analyst Advanced Playlist); ORRelevant certifications (see list below).Experience: Progressive cybersecurity experience with 3 years managing SOC operations or equivalent operational leadership in DoD/enterprise SOC environments.Demonstrated skills: SOC toolsets (SIEM, SOAR, EDR/XDR), incident handling, threat analysis, detection engineering, COOP operations, RMF/RMF related reporting, and senior‑level briefings.Acceptable Certifications (one or more preferred)CBROPS, CFR, CySA+, GCFA, GCIA, GICSP, or equivalent advanced SOC/forensics/cyber operations certificationsDesired / PreferredPrior DoD/Army/ARNG SOC or NOSC experienceExperience coordinating notifications to ARCYBER/USCYBERCOM and supporting classified enclave monitoringFamiliarity with automation, SOAR playbooks, threat hunting, and purple team exercises#ENOCSPeraton OverviewPeraton is a next‑generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world's leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can't be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we're keeping people around the world safe and secure.Target Salary Range$86,000 - $138,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual's experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.EEOEqual opportunity employer, including disability and protected veterans, or other characteristics protected by law.#J-18808-Ljbffr

Job OverviewSecurity Operations Center (SOC) LeadJob Locations: US-VA-HerndonPosition Category: Cyber SecurityClearance: Top Secret/SCIResponsibilitiesWe are seeking a highly skilled and innovative Security Operations Center (SOC) Lead to join our team in the greater DMV area, supporting the Army National Guard.Manage day‑today SOC operations: staffing, shift coverage, case handling, escalation, and incident lifecycle management.Oversee incident coordination with CIRT, NOSC, ARCYBER, USCYBERCOM, and engineering teams; implement playbooks and countermeasures during incidents.Ensure investigative quality: review cases, validate threat analysis, enforce documentation/runbook standards, and oversee evidence preservation.Lead detection engineering efforts: rule/signature/content development, tuning, enrichment, and mapping to MITRE ATT&CK.Maintain continuous monitoring aligned with STIG/IAVM/RMF requirements and ensure SOC support for defensive cyber operations.Develop and maintain SOC SOPs, playbooks, escalation matrices, COOP procedures, and communications plans.Coordinate SOC reporting and notifications to RCCNG, ARCYBER, USCYBERCOM, and other stakeholders; produce situational awareness products and executive briefings.Drive analyst training, exercises, purple teaming, and tool adoption; mentor Tier II/III analysts and refine workflows/automation.Support audits, inspections, accreditation activities, and evidence preparation for RMF/ATO and related reviews.Monitor SOC KPIs (MTTD, MTTR, case quality, false‑positive rates) and implement continuous improvement actions.#ENOCSQualificationsRequired QualificationsMinimum of 8 years with BS/BA; Minimum of 6 years with MS/MA; Minimum of 3 years with PhDClearance: TS/SCI (active)Education/Training/Certification: Candidate must meet ONE:Master's or Ph.D. in Computer Science, Cybersecurity, Data Science, Information Systems, Information Technology, or Software Engineering; ORRelevant DoD/Military training (e.g., 4C255N/4C255S/4C255A, Cyber Defense Analyst Advanced Playlist); ORRelevant certifications (see list below).Experience: Progressive cybersecurity experience with 3 years managing SOC operations or equivalent operational leadership in DoD/enterprise SOC environments.Demonstrated skills: SOC toolsets (SIEM, SOAR, EDR/XDR), incident handling, threat analysis, detection engineering, COOP operations, RMF/RMF related reporting, and senior‑level briefings.Acceptable Certifications (one or more preferred)CBROPS, CFR, CySA+, GCFA, GCIA, GICSP, or equivalent advanced SOC/forensics/cyber operations certificationsDesired / PreferredPrior DoD/Army/ARNG SOC or NOSC experienceExperience coordinating notifications to ARCYBER/USCYBERCOM and supporting classified enclave monitoringFamiliarity with automation, SOAR playbooks, threat hunting, and purple team exercises#ENOCSPeraton OverviewPeraton is a next‑generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world's leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can't be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we're keeping people around the world safe and secure.Target Salary Range$86,000 - $138,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual's experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.EEOEqual opportunity employer, including disability and protected veterans, or other characteristics protected by law.#J-18808-Ljbffr

• 

• Government Careers