Security Operations Center Lead

Security Operations Center Lead

Vacancy expired!

Description

Job Description:

Leidos is a Fortune 500™ company aimed at embracing and solving some of the world's most pressing challenges. Through science and technology, Leidos makes the world safer, healthier and more efficient. Our Civil Group offers an array of exciting career opportunities for the best IT, energy, logistics and engineering professionals.

Leidos is seeking a Security Operations Center (SOC) Lead with senior technical leadership and coordination to an enterprise Security Operations Center (SOC) working in a 24x7 operational environment on a mission-critical enterprise information technology contract. The candidate will be a lead, partnered with other technical leaders in other domain skillsets, including: cloud engineering, infrastructure, enterprise operations, and service desk operations. The SOC Lead requires daily interaction with management, security personnel at customer sites, and government personnel with other federal agencies. Applicant must be a positive, flexible, self-starter requiring minimal direct supervision, and able to excel as a leader in the fast-paced cybersecurity industry. Exceptional management, communication and interpersonal skills are a necessity; including the ability to effectively communicate via written and verbal media. The SOC Manager is responsible for providing technical oversite and managing the scheduling of SOC activities and advancing the state of analysis with techniques and tools. This position will assist with building the team, including development, training and mentoring; establishing standards for high quality of deliverables and outputs; tuning and creating processes and procedures for the SOC; and creating a sense of ownership and dedication to mission.

Responsible for the following tasks:

• Establish the operational rhythm and standards for the SOC
• Coordinate the scheduling of the 24 x 7 analysts and CIRT teams
• Lead or assign leadership for projects advancing the state of analytic techniques and tools
• Validate continual improvement and technical advances
• Maintain a forward-leaning ops tempo that includes continual validation and improvement across all SOC functions.
• Maintain situational awareness of escalated events and alerts, tools status, vulnerability status, forensics and malware investigations, intelligence status, and all other SOC functions
• Experience reporting on SOC activities and deliver SOC recommendations in accordance with government and contractual requirements Provide customers with remediation recommendations
• Serve as a Subject Matter Expert (SME) within the team for technical expertise
• Develop program of training and coaching sessions for SOC personnel on analytic techniques and tools
• Create, review, and approve new procedural documentation

Work is performed at the government location in downtown Washington, DC. Team is geographically dispersed, but mainly at the Washington, DC location with the customer. Position may include up to 10% travel both locally and nationwide.

Basic Qualifications:

• Technical understanding of core cybersecurity technologies as well as emerging capabilities
• Hands-on cybersecurity experience (Protect, Detect, Respond and Sustain) within a Computer Incident Response Team (CIRT) and/or prior experience performing large-scale incident response.
• Demonstrated understanding of the life cycle of cybersecurity threats, attacks, attack vectors and methods of exploitation with an understanding of intrusion set tactics, techniques and procedures (TTPs).
• Familiarity or experience in Intelligence Driven Defense, Cyber Kill Chain methodology, and/or MITRE ATT&CK framework.
• Familiarity with Cloud concepts and experience performing monitoring and responding to threats in Cloud environments.
• Excellent written and verbal communication skills
• The candidate shall have demonstrated capabilities to analyze highly complex technical issues, recommend plans of action for staff (including both contractor and government personnel), and manage teams supporting resolution of these issues.
• Must be US Citizen.
• Active Top Secret - Sensitive Compartmented Information (TS/SCI) Eligible
• Bachelor's degree (or equivalent) and 5-10 years of prior relevant experience. G
• 5+ years of experience supervising or leading teams or projects.

Preferred Qualifications:

- Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Security+, Certified Ethical Hacker (CEH), GIAC Security Essentials Certification (GSEC), Systems Security Certified Practitioner (SSCP)

Pay Range: