24/7 SOC Lead — Cybersecurity Operations & Incident Response

GCyber; Shiloh (IL); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Paid Leave

PTO Increase Annually

Parental Leave

Disability Insurance

Health Insurance

401(k) Matching

Parking & Transportation Allowance

Job summary

GCyber is seeking a Cybersecurity Operations Team Lead to support a large Department of War agency. You will lead a 24/7 cyber operations center responsible for monitoring, incident response, and forensics.

You will maintain shift coverage, guide incident decisions, and improve response through consistent procedures and performance analysis. Minimum requirements include 7+ years in security analytics/incident response, a Bachelor’s degree, CISSP and GCIA/GCIH, and an active TS/SCI clearance with

Qualifications

• 7+ years of experience in security analytics, incident response, threat analysis or security engineering.
• Bachelor's degree; 4 additional years of experience may substitute.
• CISSP and GCIA or GCIH certifications.
• Active TS/SCI clearance; complete required tool training before system access.

Responsibilities

• Lead a 24/7 SOC for monitoring, incident response, and forensics.
• Serve as the escalation point for all shifts.
• Manage incident declaration, escalation, and reporting to USCYBERCOM and JFHQ-DODIN.
• Maintain watch schedules, leave coverage, and staffing to sustain continuous operations.
• Lead shift briefings, handoffs, and operational reviews, and resolve recurring performance issues.
• Analyze triage, detection, and response metrics and implement measurable improvements.
• Approve automated response actions under the tiered approval model.
• Develop analysts for increased responsibility through mentoring and performance feedback.

Skills

SOC management

Incident response

Threat analysis

Security analytics

Security engineering

Coaching/Mentoring

Decision making under pressure

Education

Bachelor's degree

Tools

SIEM

EDR

CJCSM 6510.01B

Job description

GCyber is seeking a Cybersecurity Operations Team Lead to support a large Department of War agency. You will lead a 24/7 cyber operations center responsible for monitoring, incident response, and forensics.

You will maintain shift coverage, guide incident decisions, and improve response through consistent procedures and performance analysis. Minimum requirements include 7+ years in security analytics/incident response, a Bachelor’s degree, CISSP and GCIA/GCIH, and an active TS/SCI clearance with