Cybersecurity Operations Center (CSOC) 2nd Shift Lead
Контакты
120 000 - 150 000$
Формат работы
onsite
Тип работы
fulltime
Грейд
lead
Английский
b2
Страна
US
team leadershipsiemcybersecurityservicenowincident responsesocidsedripsnetwork monitoring
Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
Мало
$120к-150к/год
$150к$170кмедиана$200к
По похожим ролям (26) ~ $170к/год
72
Хорошая вакансия
развернуть
Обязанности руководителя SOC и работа с реагированием на инциденты описаны четко, а условия и льготы раскрыты подробно. Ежедневная работа на площадке во вторую смену заметно ограничивает гибкость.
Кликните для подробной информации
Ниже рынкаОфисная вторая сменаЧеткая зона ответственностиХороший пакет льгот
Оценка от Hirify AI
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Cybersecurity Operations Center (CSOC) 2nd Shift Lead (Cybersecurity/Incident Response): Leading SOC analysts and coordinating the investigation, triage, and mitigation of complex cyber incidents with an accent on incident response, SLA compliance, and technical guidance. Focus on prioritizing security alerts, enforcing SOPs, improving SOC workflows, and collaborating with forensics, threat intelligence, IT, and network teams.
Location: Onsite daily in Martinsburg, West Virginia, or Austin, Texas; 2nd shift, Sunday–Thursday, 1430–2300 EST or 1330–2200 CST
Salary: $120,000–$150,000 annually, depending on experience
Company
hirify.global delivers technology solutions and mission support to federal agencies in civilian, health, and national security environments using AI/ML, cloud, cybersecurity, and IT modernization.
What you will do
Lead and guide SOC analysts during the 2nd shift, including team meetings, training, and collaboration.
Oversee triage of security alerts and incidents, prioritize cases by severity and impact, and coordinate timely response.
Provide technical guidance to Tier 1 and Tier 2 analysts investigating incidents and interpreting technical data.
Ensure adherence to incident-response SLAs, SOPs, compliance requirements, and detailed documentation standards.
Identify and implement improvements to SOC tools, processes, workflows, and operational efficiency.
Collaborate with forensics, threat intelligence, IT, network administrators, management, and other stakeholders.
Requirements
Bachelor’s degree in computer science, cybersecurity, information technology, or a related field, or equivalent work experience.
5+ years of experience supporting large-scale IT-related projects, including 3+ years supporting incident response in an enterprise-level SOC.
Deep understanding of cybersecurity principles and incident-response methodologies, with a proactive mindset for high-pressure SOC operations.
Strong experience with SIEM, IDS/IPS, EDR, and network-monitoring technologies, plus enterprise ticketing systems such as ServiceNow.
Excellent analytical, problem-solving, verbal, and written communication skills.
Ability to work independently and collaboratively, identify errors, determine root causes, devise solutions with minimal oversight, and learn quickly across multiple functions.
Must be a U.S. citizen or legal permanent resident and able to obtain and maintain a Federal Government Public Trust clearance.
Nice to have
Industry certifications such as CISSP, GCIH, GCFA, CEH, or equivalent.
Culture & Benefits
Family-focused culture, collaborative work environment, and professional development and career-growth opportunities.
Medical insurance, including HSA-eligible plans, plus employer-paid dental, vision, short-term disability, long-term disability, and life insurance.
5% 401(k) company matching, paid holidays, PTO accrual plans, and paid parental leave.
Flexible-schedule and teleworking options, team and company-wide events, recognition, and appreciation programs.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →