Incident Detection/Response Manager (SOC Manager)

Location: Remote within close proximity to the National Capital Region in Virginia, United States

Salary: $140,000–$160,000 per year

Company

Everforth hirify.global is the federal segment of Everforth, delivering cybersecurity, data and AI, and enterprise transformation solutions to defense, intelligence, and federal civilian agencies.

What you will do

• Lead daily 24x7x365 SOC operations, including shift scheduling, coverage planning, documentation, SOPs, playbooks, and CONOPS.
• Direct Tier I, II, and III incident response across a large-scale federal IT enterprise.
• Serve as incident commander during containment, eradication, and recovery activities.
• Lead post-incident reviews, root cause analysis, and continuous improvement of detection and response capabilities.
• Manage SIEM notables dashboards, alert triage, escalation, resolution, and SOC performance metrics.
• Collaborate with threat hunting, CTI, engineering, architecture, IT operations, service providers, and government stakeholders.

Requirements

• U.S. citizenship and residence within close proximity to the National Capital Region are required.
• Active Public Trust 6c clearance, or the ability to obtain and maintain one.
• 8+ years of IT experience, including 4+ years in incident response and SOC operations.
• At least one of GCIH, GCFA, GREM, or an equivalent certification.
• Hands-on experience with SIEM, SOAR, EDR, CDM, malware analysis, operating systems, networking, log analysis, traffic analysis, and endpoint forensics.
• Experience managing complex federal or enterprise SOC environments and applying NIST SP 800-61, SANS PICERL, and MITRE ATT&CK.

Nice to have

• CISSP, GCIA, GSE, CISM, or AWS certification, with AWS GovCloud experience.
• Experience with NIST SP 800-53, NIST RMF, IRS Publication 1075, FedRAMP, OMB compliance, continuous monitoring, and POA&M remediation.
• Experience with AWS GovCloud or Azure Government security operations.
• Python or PowerShell scripting, CDM dashboards, DevSecOps pipelines, and CI/CD security operations.
• Bachelor’s degree in cybersecurity, information technology, computer science, or a related field.

Culture & Benefits

• Mission-driven work supporting a major federal civilian agency and sensitive national-level information.
• Focus on innovation, delivery excellence, professional development, and high-performing teams.
• Equal opportunity employment.