Hybrid Security Operations Team Lead

Commonwealth of VA Careers; Richmond (VA); Hybrid; USD 120,000 - 140,000; Full time

Job summary

Commonwealth of VA Careers in Richmond, VA, seeks a Security Operations Team Lead to oversee cyber defense, lead Security Analysts, and drive incident response. You will refine detections, manage SIEM tools, and ensure secure configurations across on-prem and cloud environments.

The role emphasizes leadership, advanced security expertise, and collaboration with cross‑functional teams to protect Virginia’s systems and data.

Qualifications

• Leadership experience guiding and mentoring security analysts, with hands-on direction during investigations, escalations, and containment activities.
• Extensive daily security monitoring and incident response experience, including threat identification, analysis, prioritization, and remediation.
• Practical experience applying security frameworks such as NIST, CIS Controls, SEC 530, and MITRE ATT&CK to SOC playbooks and workflows.
• Experience tuning SIEM alerts, refining detection logic, reconciling monitoring results, and ensuring accuracy of security event and log data.
• Experience supporting cloud security operations using AWS CloudTrail and Security Hub to detect misconfigurations and unauthorized activity.

Responsibilities

• Lead daily security monitoring and incident response activities to identify, analyze, prioritize, and remediate threats.
• Provide hands-on leadership guiding analysts through investigations, escalations, containment actions, and coordinated responses.
• Prioritize and tune SIEM alerts and detection logic to maintain a robust security posture.
• Oversee log ingestion health and data integrity across Splunk and other platforms, coordinating with owners to restore visibility.
• Collaborate with admins, app teams, cloud teams, and vendors to integrate security controls across environments.

Skills

Leadership

Security monitoring

Incident response

Collaboration

Communication

Mentoring

Tools

Splunk

CyberArk

BeyondTrust

CloudTrail

Security Hub

Job description

Commonwealth of VA Careers in Richmond, VA, seeks a Security Operations Team Lead to oversee cyber defense, lead Security Analysts, and drive incident response. You will refine detections, manage SIEM tools, and ensure secure configurations across on-prem and cloud environments.

The role emphasizes leadership, advanced security expertise, and collaboration with cross‑functional teams to protect Virginia’s systems and data.