SOC Shift Lead

We are seeking a highly skilled and innovative SOC Shift Lead to join our team in the greater DMV area, supporting the Army National Guard.

Responsibilities

• Supervise real‑time SOC monitoring operations during assigned shifts: coordinate analyst workload, manage escalations, and direct incident response actions.
• Review and validate high‑priority alerts and investigative findings; ensure accurate triage and appropriate escalation to CIRT/Tier‑2/3 teams.
• Communicate operational status, incident summaries, and situational awareness updates to leadership and stakeholders.
• Maintain and oversee SOC dashboards, metrics (MTTD/MTTR, alert volumes, false‑positive rates), and shift handover logs to ensure continuity.
• Guide continuous improvement initiatives: refine triage procedures, tuning activities, playbooks, and analyst training to enhance detection and response effectiveness.
• Act as senior on‑shift authority for operational decisions, coordinating cross‑team actions with NOC, engineering, and mission partners during incidents.
• Ensure compliance with documented SOPs, evidence collection practices, and incident documentation standards for auditability and post‑incident review.

#ENOCS

Qualifications

• Minimum of 8 years with BS/BA; Minimum of 6 years with MS/MA; Minimum of 3 years with PhD

• Clearance: Active TS/SCI clearance.

• Candidate must meet ONE of the following:

  • Master’s degree or Ph.D. in Computer Science, Cybersecurity, Data Science, Information Systems, Information Technology, Software Engineering, or a related field; OR
  • Relevant DoD/military training (examples: 4‑11‑C32‑255S (CP); 4C‑255N (CP); 4C‑255A (CP); M0923W1; A‑531‑4417; Cyber Defense Analyst (Advanced) Playlist); OR
  • Relevant professional certification or equivalent experience (examples: CBROPS; CFR; CySA+; GCFA; GCIA; GICSP).

• Required experience and skills:

  • SOC/incident response/cyber operations experience with at least 3 years in senior SOC analyst or shift lead roles.
  • Proven ability to lead shift operations, make rapid escalation decisions, and produce concise operational briefings for leadership.
  • Hands‑on experience with SIEM, EDR, network telemetry, and SOC tooling; strong skills in alert validation, triage, and incident documentation.
  • Capability to manage analyst teams, enforce SOPs, and drive tuning/quality assurance of detection content.
  • Excellent communication, coordination, and decision‑making skills under high‑pressure incident conditions.

• Desired:

  • Prior DoD/ARNG SOC leadership or senior shift lead experience.
  • Experience integrating SOC operations with CIRT, NOC, NETCOM/ARCYBER coordination, and cross‑domain incident handling.
  • Certifications such as CBROPS, GCFA, or equivalent advanced SOC/forensics credentials.

#ENOCS