SOC Manager (Cybersecurity)

Location: Washington, DC; remote workplace

Company

hirify.global is a veteran-owned small business delivering cybersecurity and technology services to federal customers.

What you will do

• Direct daily SOC operations, Tier I–III personnel, staffing, shift coverage, monitoring, and operational readiness across federal enterprise environments.
• Lead the full incident response lifecycle from detection and analysis through containment, eradication, and recovery.
• Coordinate response activities with cybersecurity teams, IT operations, cloud service providers, and federal stakeholders.
• Oversee SIEM, SOAR, EDR, and CDM technologies, including event notables, dashboards, alert prioritization, and enterprise security visibility.
• Lead post-incident reviews, root-cause analysis, corrective actions, and continuous improvements to detection and response capabilities.
• Maintain SOPs, playbooks, CONOPS, escalation procedures, communications protocols, and incident reporting practices aligned with federal requirements.

Requirements

• Minimum 8 years of progressive IT or cybersecurity experience, including at least 4 years of hands-on incident response experience in complex enterprise environments.
• At least one of GCIH, GCFA, GREM, or an equivalent industry-recognized cybersecurity certification.
• Experience managing or leading a SOC with Tier I, II, and III personnel, 24/7 operational coverage, incident escalation, shift scheduling, and security operations processes.
• Hands-on experience with SIEM, SOAR, EDR, CDM, malware analysis, security event correlation, threat investigation, incident response automation, and security monitoring dashboards.
• Strong understanding of Windows and Linux, enterprise networking, security protocols, and AWS-native security services and tools.
• Ability to oversee incident detection, investigation, and response across on-premises and cloud environments.

Culture & Benefits

• Full-time position within the Security Resilience / Vulnerability Assessment Team.
• Remote workplace arrangement associated with Washington, DC.
• Work supports complex federal cybersecurity environments and customer-specific incident response obligations.