siemcybersecurityincident responsecisspcloud securityforensicsthreat intelligencemalware analysissecurity operations center
Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
развернуть
$160к-205к/год
$150к$180кмедиана$210к
По похожим ролям (49) ~ $180к/год
82
Хорошая вакансия
развернуть
Чётко очерченная руководящая роль в SOC с серьёзной ответственностью за реагирование на инциденты и хорошим пакетом льгот, но работа на площадке по федеральному контракту и строгие требования к гражданству и допуску сужают круг доступных специалистов.
Ограничения по допуску
Работа на площадке
Понятная зона ответственности
Хороший пакет льгот
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
SOC Manager (Cybersecurity): Leading a 24x7x365 federal Security Operations Center across on-premises and cloud environments with an accent on incident response, SIEM-based threat detection, and SOC process maturity. Focus on coordinating complex investigations, managing continuous security operations, and ensuring containment, recovery, compliance, and performance reporting.
Location: Onsite – Washington, DC; telework at client discretion
Salary: $160K–$205K
Company
hirify.global delivers advanced technology and mission support solutions for federal civilian, health, and national security agencies using AI/ML, cloud, cybersecurity, and IT modernization.
What you will do
Lead 24x7x365 SOC operations across on-premises and cloud environments.
Manage contractor SOC staff and direct shift managers to maintain continuous coverage.
Lead incident response from detection through closure, including investigation coordination, escalation, containment, eradication, and recovery.
Develop and maintain SOC communications plans, process documentation, incident and event playbooks, and standard operating procedures.
Use SIEM tools for security log aggregation, threat detection, alert monitoring, triage, incident analysis, forensic and malware analysis.
Track SOC performance, resource needs, incidents, trends, and investment metrics; communicate findings to senior management and coordinate with CISA and partner SOCs.
Requirements
Bachelor’s degree in Computer Science or an IT-related discipline.
Ten years of experience running a SOC, including at least five years running a combined on-premises/cloud SOC.
Ten years of cybersecurity incident response experience in one or more environments with 50,000+ endpoints, covering all five NIST Cybersecurity Framework functions: Identify, Protect, Detect, Respond, and Recover.
CISSP or an equivalent certification covering a similar level of information security knowledge and experience.
At least two years applying deep cybersecurity knowledge, including network security, threat intelligence, and incident response, in a SOC setting.
Demonstrated leadership and team management abilities, plus expertise with SIEM tools and security monitoring technologies.
Must be a US Citizen and have or be able to obtain a Federal Government Public Trust clearance.
Nice to have
Experience managing SOC operations on federal government contracts, including service-level agreements and reporting to government SOC leadership.
Experience with the Elastic Security Stack, including SIEM, EDR, and SOAR.
Experience with federal incident reporting requirements, including OMB M-21-31 and coordination with CISA.
Experience managing SOC coverage for industrial control system environments.
GCIH, GSOM, CISM, or similar certifications.
Culture & Benefits
Full-time position with minimal travel: occasional CONUS travel of approximately one week per year.
Medical insurance, including HSA-eligible plans, plus employer-paid dental and vision options.
Employer-sponsored short-term disability, long-term disability, and life insurance.
5% 401(k) company matching, paid holidays, PTO accrual, and paid parental leave.
Flexible schedules, teleworking options, professional development, career growth, and team events.
Будьте осторожны
Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →