Security Operations (SOC) Manager

$126,100 - $227,950/Yr

Leidos - Washington, DC

Full-time - Senior

Washington, DC

Professional, Scientific, and Technical Services

About the position

The Security Operations Manager at Leidos is responsible for overseeing the daily operations of the Security Operations Center (SOC) supporting the Department of Homeland Security (DHS). This role involves managing a team of security operations staff, implementing new tools and methodologies, and ensuring effective incident response and cybersecurity practices. The manager will also mentor junior staff, conduct technical analysis, and maintain high standards of reporting and operational efficiency.

Responsibilities

• Plan, direct, and manage day-to-day activities of contractor security operations staff.
• Drive implementation and improvement of new tools, capabilities, frameworks, and methodologies across all teams.
• Manage and conduct hands-on technical analysis during high-visibility investigations.
• Guide and mentor junior staff in security operations.
• Suggest and implement controls for key information security gaps.
• Conduct and maintain detailed gap analysis of customer capabilities.
• Ensure timeliness and quality of reporting produced by the security operations staff.
• Instill and reinforce industry best practices in incident response and cybersecurity analysis.
• Promote and drive implementation of automation and process efficiencies.
• Act as subject matter expert in several security technologies.
• Communicate adeptly at all levels from executive-suite to front-line analysts.
• Create job descriptions for new positions and manage annual performance plans for the SecOps team.
• Develop and enforce event response and escalation documentation and processes.
• Respond to customer inquiries around security-related questions.
• Develop and support incident response plans, processes, and procedures.
• Track emerging security practices and innovations.

Requirements

• Bachelor's degree in Computer Science, Engineering, Information Technology, Cybersecurity, or related field.
• Twelve (12) years of experience in incident detection and response, malware analysis, and/or cyber forensics.
• 6+ years of supervising and/or managing teams.
• 8+ years of intrusion detection and/or incident handling experience.
• Ability to analyze new attacks and provide guidance to analysts.
• Knowledgeable of various Intel Frameworks (e.g., Cyber Kill Chain, Diamond Model, MITRE ATT&CK).
• Experience with Cloud security monitoring (e.g., o365, Azure, AWS).

Nice-to-haves

• Advanced knowledge in planning, directing, and managing Computer Incident Response Team (CIRT) and/or SOC operations.
• Significant experience supervising and leading employees in a mature SOC environment.
• Deep technical understanding of core cybersecurity technologies and emerging capabilities.
• Demonstrated mastery of the life cycle of cybersecurity threats and methods of exploitation.
• Extensive leadership experience creating and maintaining high-performing teams.

Benefits

• Competitive salary range of $126,100 - $227,950 per year.
• Opportunities for professional development and training.