SOC Manager, Cybersecurity

Location: On-site in Los Angeles or Washington, DC, United States. The role includes after-hours incident response and participation in an on-call rotation. U.S. citizenship and a U.S. government security clearance are required; an active Secret clearance is preferred or must be obtainable and maintainable.

Base salary: $180,000–$240,000 per year, excluding bonus, equity, and benefits.

Company

hirify.global develops defense technology products powered by Coherent Distributed Networks for warfighters, commercial air operators, and border protection teams.

What you will do

• Build and lead the SOC operating model, including coverage hours, on-call rotations, escalation tiers, staffing, playbooks, budget, tooling, and vendors.
• Hire, train, and retain analysts and detection engineers while establishing career paths and technical standards.
• Own log-source coverage and detection content across enterprise IT, CUI environments, cloud tenants, engineering labs, and production and test networks.
• Lead threat hunting, incident response, tabletop exercises, purple-team engagements, and end-to-end investigations.
• Operate data-loss monitoring and insider-threat investigations for CUI and export-controlled technical data.
• Produce CMMC Level 2 and NIST SP 800-171 evidence, report SOC metrics, and use automation and AI-assisted triage within the compliance boundary.

Requirements

• 8+ years in security operations, incident response, or threat hunting, including 4–5+ years leading a SOC or incident-response team.
• Experience in regulated defense, aerospace, or federal environments handling CUI or export-controlled data.
• Working knowledge of NIST SP 800-171, CMMC Level 2, DFARS 252.204-7012, and NIST SP 800-61.
• Hands-on experience with SIEM, EDR, and SOAR platforms, including detection writing, packet analysis, and forensic timelines.
• Experience with restricted government cloud tenants, MSSP or MDR management, and at least one SIEM query language.
• Python, PowerShell, or comparable scripting skills; strong technical writing; and a bachelor's degree in a technical field or equivalent experience.

Nice to have

• Experience building an early-stage SOC at a hardware or defense technology company.
• Experience with C3PAO assessments, DIBCAC reviews, insider-threat programs, counterintelligence, or DCSA.
• Familiarity with NISPOM and classified-system monitoring boundaries.
• Experience monitoring laboratory, manufacturing, or embedded environments.
• GCIH, GCFA, GCIA, GCDA, GNFA, or CISSP certification; military, intelligence-community, or DoD cyber operations experience.

Culture & Benefits

• Medical, dental, and vision benefits fully paid by the company.
• 401(k) with a 50% company match up to 6% of pay, FSA, HSA, and life insurance.
• Unlimited PTO, casual dress code, free daily lunch, and a stocked kitchen for on-site employees.
• Competitive base salary, pre-IPO stock options, relocation assistance, and planned annual bonuses.
• Work with a growing organization of 500+ employees across five global offices.