DMDC SOC Manager - Deputy Program Manager

Leidos Inc; Alexandria (VA); On-site; USD 180,000 - 240,000; Full time

Job summary

Leidos Inc. seeks an experienced Security Operations Center (SOC) Manager - Deputy Program Manager to lead a critical enterprise cyber defense program supporting DMDC and DHRA within OUSD P&R.

The role oversees a large, globally distributed environment with RMF boundaries, hybrid cloud, and multiple CSSPs, driving incident response, detection, and operational excellence. Based at a government site with reporting to Government leadership, the position emphasizes mentorship, process improvement,

Qualifications

• 10+ years of progressively responsible cybersecurity operations experience.
• Experience leading enterprise Security Operations Center leadership.
• Bachelor's degree or equivalent in Cybersecurity, CS, IT, Engineering, or related field.

Responsibilities

• Provide leadership and operational management of the SOC.
• Lead and mentor a team for continuous monitoring, threat detection, and incident response.
• Direct incident response activities and report cybersecurity events to Government leadership.
• Develop, implement, and improve SOC procedures, playbooks, workflows, and training.
• Coordinate cyber defense across Government agencies, contractors, and CSSPs.

Skills

Cybersecurity leadership

Security Operations Center

Incident response

Cyber defense

Operational management

Education

Bachelor's degree in a related field

Job description

Description

Leidos is seeking an experienced cybersecurity operations leader to serve as the Security Operations Center (SOC) Manager - Deputy Program Manager supporting the Defense Manpower Data Center (DMDC) and the Defense Human Resources Activity (DHRA) within the Office of the Under Secretary of Defense for Personnel & Readiness (OUSD P&R).

This Key Personnel position provides operational leadership for enterprise cyber defense supporting one of the Department of Defense's most critical information environments. DMDC maintains the Department's largest centralized repository of personnel, manpower, identity, readiness, pay, casualty, personnel security, entitlement, and financial information. The SOC Manager will lead the team responsible for protecting these mission-essential systems through continuous monitoring, cyber threat detection, incident response, and operational excellence.

The selected candidate will provide leadership for Security Operations Center activities supporting a complex enterprise environment that includes approximately 15,000 network and endpoint devices, over 600 Government applications, approximately 100 Risk Management Framework (RMF) authorization boundaries, hybrid cloud environments, globally distributed infrastructure, and multiple cybersecurity service providers supporting worldwide operations.

This role extends beyond daily SOC management. The SOC Manager serves as the operational leader responsible for establishing priorities, maturing cyber defense capabilities, improving operational processes, mentoring cybersecurity professionals, and ensuring Government leadership maintains timely awareness of significant cybersecurity events. Success in this position requires exceptional technical leadership, sound operational judgment, and the ability to lead high-performing teams in a mission-critical environment.

***Work Location: Key Personnel are expected to report to a government site. The selected candidate will be based at either the Mark Center in Alexandria, VA, or the DoD Center-Monterey Bay (DODC-MB) in Seaside, CA, in accordance with contract requirements***

Mission Environment

• Approximately 15,000 network and endpoint devices.
• More than 600 Government-owned applications supporting DoD missions.
• Approximately 100 Risk Management Framework (RMF) authorization boundaries.
• Hybrid cloud environments including Oracle Cloud Infrastructure (OCI), Amazon Web Services (AWS), Software-as-a-Service (SaaS), and DISA-hosted capabilities.
• Worldwide enterprise infrastructure supporting personnel, identity, readiness, and mission support operations.
• Multiple Cybersecurity Service Providers (CSSPs) operating across the enterprise.
• Government and contractor-operated environments requiring close coordination between cybersecurity, IT operations, and mission stakeholders.

Primary Responsibilities

• Provide overall leadership and operational management of the Security Operations Center (SOC).
• Lead, mentor, and develop a high-performing team of cybersecurity professionals responsible for continuous monitoring, cyber threat detection, incident analysis, and incident response.
• Direct enterprise cyber incident response activities, ensuring rapid detection, analysis, containment, eradication, recovery, and reporting of cybersecurity events.
• Serve as the primary operational interface with Government leadership for SOC activities, ensuring timely communication regarding operational status, emerging threats, and significant cybersecurity incidents.
• Develop, implement, and continuously improve SOC standard operating procedures, incident response playbooks, analyst workflows, and training programs.
• Establish operational priorities and performance metrics that improve SOC effectiveness, operational maturity, and analyst readiness.
• Coordinate cyber defense activities across Government organizations, contractor teams, and external Cybersecurity Service Providers (CSSPs).
• Oversee continuous monitoring of enterprise networks, endpoints, cloud environments, applications, and cybersecurity tools to identify and mitigate evolving threats.
• Provide operational recommendations that reduce enterprise cyber risk and improve defensive capabilities.
• Ensure SOC operations comply with applicable DoD cybersecurity policies, DoD 8140 requirements, Risk Management Framework (RMF) guidance, and industry best practices.
• Support cybersecurity assessments, operational planning activities, and continuous process improvement initiatives.
• Foster a culture of accountability, collaboration, innovation, and operational excellence within the SOC.

This position is designated as Key Personnel under the contract. The selected candidate will serve as the operational lead for Security Operations Center (SOC) activities and is expected to be available at contract start. Because of the critical nature of this role, any future personnel substitutions are subject to Government approval in accordance with contractual requirements.

• Manage staffing, workforce performance, retention, and resource needs.
• Develop and mentor Leidos employees, supporting career growth and leadership development.
• Manage Leidos program risks, commitments, and performance.
• Serve as acting Program Manager in their absence.

Basic Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related technical discipline with 10 years of progressively responsible experience in cybersecurity operations, cyber defense, incident response, or Security Operations Center leadership. Additional relevant experience may be considered in lieu of a degree in accordance with Leidos equivalency guidelines.
• Demonstrated experience leading an enterprise Security