team leadershipsiemcybersecuritynistincident responseincident managementsocsoar
Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
ЗП не указана
На похожих ролях по рынку
$150к$177кмедиана$210к
26 в выборке
79
Хорошая вакансия
развернуть
Обязанности руководителя SOC-команды в федеральном реагировании на инциденты описаны чётко, но обязательная работа на площадке и требование гражданства США заметно ограничивают доступность вакансии.
Кликните для подробной информации
Оценка от Hirify AI
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
SOC Team Lead (Cybersecurity): Leading incident report acceptance and coordination for a 24x7x365 federal Security Operations Center with an accent on incident documentation, escalation, and cross-functional handling. Focus on assigning and reviewing analyst work, solving difficult and unclear technical problems, and ensuring incidents are validated and tracked through closure.
Location: Onsite in New Carrollton, Maryland or Memphis, Tennessee, United States. The role requires onsite presence at client facilities as directed.
Salary: TBD.
Company
hirify.global delivers technology solutions and mission support to federal agencies across civilian, health, and national security environments, including cybersecurity, AI/ML, cloud, and IT modernization.
What you will do
Lead incident report acceptance and coordination for a 24x7x365 Security Operations Center.
Assign and review SOC analyst work and coordinate incoming reports from authorized sources, client stakeholders, contractors, service providers, CISA, and partner SOCs.
Monitor approved communication channels and record, validate, and update incident information in tracking systems.
Refer potential incidents for review or action and coordinate handling across relevant SOC functions and partner organizations.
Maintain incident documentation covering actions, findings, timelines, and escalation history.
Escalate incidents and decisions according to established procedures and verify records are complete before closure.
Requirements
Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field plus 7+ years of relevant professional experience. Three additional years of relevant experience may substitute for the degree.
Seasoned technical individual contributor, fully proficient in applying technical principles, theories, and concepts.
Ability to develop solutions to difficult and unclear technical problems requiring deep technical knowledge.
Deep understanding of the principles, theories, and concepts of the technical domain, with broad understanding of related specialty areas.
Experience with SOC incident intake, ticketing, and case management in a large enterprise.
Working knowledge of NIST SP 800-61 and federal incident reporting requirements.
Experience leading a team or serving as a task lead, including assigning work, reviewing quality, and reporting status to client leadership.
Must be a U.S. Citizen and able to obtain a Public Trust clearance.
Nice to have
Experience supporting federal government contracts as a contractor, including contract performance standards, deliverable schedules, and government review and approval processes.
Certifications such as GCIH, CySA+, or CISSP.
Experience with SIEM and SOAR platforms.
Experience coordinating with CISA and partner SOCs.
Culture & Benefits
Family-focused culture and a dynamic, productive work environment.
Medical insurance plans, including HSA-eligible options.
Employer-paid dental and vision insurance, plus employer-sponsored short-term disability, long-term disability, and life insurance.
5% 401(k) company matching, paid holidays, PTO accrual plans, and paid parental leave.
Professional development, career growth opportunities, team events, recognition, appreciation, flexible schedules, and teleworking options.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →