DMDC SOC Manager - Deputy Program Manager

Leidos Inc; Seaside (CA); On-site; USD 180,000 - 240,000; Full time

Job summary

Leidos Inc. is seeking an experienced cybersecurity operations leader to serve as the Security Operations Center (SOC) Manager – Deputy Program Manager for the DMDC and DHRA under OUSD P&R.

The role provides operational leadership for enterprise cyber defense across a large DoD environment including RMF boundaries and hybrid clouds. The SOC Manager will lead a team handling continuous monitoring, threat detection, incident response, and process maturation, reporting to government leadership

Qualifications

• 10 years of progressively responsible cybersecurity operations experience.
• Proven enterprise SOC leadership and incident response expertise.
• Experience mentoring cybersecurity professionals and leading teams.

Responsibilities

• Provide overall leadership and operational management of the SOC.
• Mentor and develop a high-performing cybersecurity team.
• Direct enterprise cyber incident response and reporting.
• Interface with government leadership on SOC status and threats.
• Develop and improve SOC SOPs, playbooks, and workflows.
• Set priorities and metrics to improve SOC maturity and readiness.
• Coordinate defense across government, contractors, and CSSPs.
• Oversee monitoring of networks, endpoints, and cloud environments.
• Ensure compliance with DoD policies, RMF, and 8140 requirements.
• Support assessments and continuous process improvement.

Skills

Leadership

SOC management

Incident response

Cybersecurity operations

Team mentoring

Operational leadership

RMF/DoD guidance

Education

Bachelor's degree in Cybersecurity/CS/IT/Engineering

Job description

Description

Leidos is seeking an experienced cybersecurity operations leader to serve as the Security Operations Center (SOC) Manager - Deputy Program Manager supporting the Defense Manpower Data Center (DMDC) and the Defense Human Resources Activity (DHRA) within the Office of the Under Secretary of Defense for Personnel & Readiness (OUSD P&R).

This Key Personnel position provides operational leadership for enterprise cyber defense supporting one of the Department of Defense's most critical information environments. DMDC maintains the Department's largest centralized repository of personnel, manpower, identity, readiness, pay, casualty, personnel security, entitlement, and financial information. The SOC Manager will lead the team responsible for protecting these mission-essential systems through continuous monitoring, cyber threat detection, incident response, and operational excellence.

The selected candidate will provide leadership for Security Operations Center activities supporting a complex enterprise environment that includes approximately 15,000 network and endpoint devices, over 600 Government applications, approximately 100 Risk Management Framework (RMF) authorization boundaries, hybrid cloud environments, globally distributed infrastructure, and multiple cybersecurity service providers supporting worldwide operations.

This role extends beyond daily SOC management. The SOC Manager serves as the operational leader responsible for establishing priorities, maturing cyber defense capabilities, improving operational processes, mentoring cybersecurity professionals, and ensuring Government leadership maintains timely awareness of significant cybersecurity events. Success in this position requires exceptional technical leadership, sound operational judgment, and the ability to lead high-performing teams in a mission-critical environment.

***Work Location: Key Personnel are expected to report to a government site. The selected candidate will be based at either the Mark Center in Alexandria, VA, or the DoD Center-Monterey Bay (DODC-MB) in Seaside, CA, in accordance with contract requirements***

Mission Environment

• Approximately 15,000 network and endpoint devices.
• More than 600 Government-owned applications supporting DoD missions.
• Approximately 100 Risk Management Framework (RMF) authorization boundaries.
• Hybrid cloud environments including Oracle Cloud Infrastructure (OCI), Amazon Web Services (AWS), Software-as-a-Service (SaaS), and DISA-hosted capabilities.
• Worldwide enterprise infrastructure supporting personnel, identity, readiness, and mission support operations.
• Multiple Cybersecurity Service Providers (CSSPs) operating across the enterprise.
• Government and contractor-operated environments requiring close coordination between cybersecurity, IT operations, and mission stakeholders.

Primary Responsibilities

• Provide overall leadership and operational management of the Security Operations Center (SOC).
• Lead, mentor, and develop a high-performing team of cybersecurity professionals responsible for continuous monitoring, cyber threat detection, incident analysis, and incident response.
• Direct enterprise cyber incident response activities, ensuring rapid detection, analysis, containment, eradication, recovery, and reporting of cybersecurity events.
• Serve as the primary operational interface with Government leadership for SOC activities, ensuring timely communication regarding operational status, emerging threats, and significant cybersecurity incidents.
• Develop, implement, and continuously improve SOC standard operating procedures, incident response playbooks, analyst workflows, and training programs.
• Establish operational priorities and performance metrics that improve SOC effectiveness, operational maturity, and analyst readiness.
• Coordinate cyber defense activities across Government organizations, contractor teams, and external Cybersecurity Service Providers (CSSPs).
• Oversee continuous monitoring of enterprise networks, endpoints, cloud environments, applications, and cybersecurity tools to identify and mitigate evolving threats.
• Provide operational recommendations that reduce enterprise cyber risk and improve defensive capabilities.
• Ensure SOC operations comply with applicable DoD cybersecurity policies, DoD 8140 requirements, Risk Management Framework (RMF) guidance, and industry best practices.
• Support cybersecurity assessments, operational planning activities, and continuous process improvement initiatives.
• Foster a culture of accountability, collaboration, innovation, and operational excellence within the SOC.

This position is designated as Key Personnel under the contract. The selected candidate will serve as the operational lead for Security Operations Center (SOC) activities and is expected to be available at contract start. Because of the critical nature of this role, any future personnel substitutions are subject to Government approval in accordance with contractual requirements.

• Manage staffing, workforce performance, retention, and resource needs.
• Develop and mentor Leidos employees, supporting career growth and leadership development.
• Manage Leidos program risks, commitments, and performance.
• Serve as acting Program Manager in their absence.

Basic Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related technical discipline with 10 years of progressively responsible experience in cybersecurity operations, cyber defense, incident response, or Security Operations Center leadership. Additional relevant experience may be considered in lieu of a degree in accordance with Leidos equivalency guidelines.
• Demonstrated experience leading an enterprise Security