SOC Manager (Cybersecurity)

TL;DR

SOC Manager (Cybersecurity): Providing operational leadership and management oversight for 24x7x365 SOC operations supporting the Administrative Office of the United States Courts with an accent on incident response, alert triage, and federal compliance. Focus on managing high-endpoint environments, optimizing MTTA/MTTT metrics, and ensuring adherence to NIST frameworks.

Location: Hybrid (Washington, DC). Must have an active Public Trust clearance.

Company

hirify.global provides technical program support for the Administrative Office of the United States Courts.

What you will do

• Lead 24/7/365 SOC operations, managing cybersecurity triage, incident response, containment, remediation, and recovery.
• Oversee alert triage activities utilizing Splunk Enterprise Security, Microsoft Sentinel, ServiceNow, and Jira.
• Manage SOC analysts, incident responders, and forensic personnel to ensure staffing coverage and quality performance.
• Develop and maintain cybersecurity triage work instructions, incident handling SOPs, and operational documentation.
• Coordinate with government leadership and stakeholders regarding operational risks, emerging threats, and priority incidents.
• Manage operational metrics including MTTA and MTTT to ensure adherence to SLA requirements.

Requirements

• Active Public Trust clearance.
• B.S. in Computer Science, Information Technology, or a related field.
• 7+ years of incident responder experience, with 2+ years of technical direction for a SOC with over 5,000 endpoints.
• 2+ years of experience implementing IR in federal environments following NIST CSWP-29: CSF and NIST SP-800-61 guidelines.
• 2+ years of experience with Splunk SIEM and 3+ years of auditing Linux and Windows operating systems.
• Active SANS GCIH or GCIA certification.