Incident Response 2nd Shift Lead

Revolutional; Martinsburg (WV); On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

Medical insurance

Dental & Vision coverage

401(k) with company match

Paid holidays & PTO

Job summary

Revolutional is seeking a Cybersecurity Operations Center (CSOC) 2nd Shift Lead to safeguard VA digital assets and coordinate incident response. You will lead SOC analysts, triage alerts, and ensure timely, compliant incident handling onsite in Martinsburg, WV or Austin, TX.

The role requires a 2nd shift (2:30 PM–11:00 PM) with a focus on leadership, process improvement, and cross-functional collaboration. A Public Trust clearance is valued and US citizenship or permanent residency is needed.

Qualifications

• Bachelor's degree in computer science, cybersecurity, information technology, or related field (or equivalent).
• 5+ years supporting large-scale IT projects.
• 3+ years in enterprise SOC incident response.
• Certifications like CISSP, GCIH, GCFA, CEH are desirable.
• Strong experience with SIEM, IDS/IPS, EDR, and network monitoring tools.
• Experience with ServiceNow ticketing system.

Responsibilities

• Lead SOC analysts during your shift.
• Ensure adherence to incident response SLAs and monitor KPIs.
• Oversee triage of security alerts and incidents by severity.
• Provide guidance to Tier 1 and Tier 2 analysts during investigations.
• Ensure SOPs are followed and train analysts on new tools and procedures.
• Identify opportunities for process improvement and tool enhancements.
• Document incident response activities with actions and lessons learned.

Skills

Team Leadership

Incident Response

SIEM

Threat Monitoring

Security Operations

Documentation

Communication

Education

Bachelor's degree in CS/Cybersecurity/IT

Tools

SIEM

IDS/IPS

EDR

ServiceNow

Job description

Revolutional delivers advanced technology solutions and mission support to federal agencies across civilian, health, and national security environments. We apply modern capabilities, including AI/ML, cloud, cybersecurity, and IT modernization to solve complex challenges, enable faster and more secure operations, and drive measurable mission outcomes.
We are redefining how federal technology gets built and delivered by operating with a product mindset, prioritizing speed, ownership, and execution over bureaucracy.

Description

Title:

Cybersecurity Operations Center (CSOC) 2nd Shift Lead

Location:

Martinsburg, WV or Austin, TX / onsite daily Sunday-Thursday 2nd shift

Terms:

Full-time

Salary:

$120-150k DoE

Clearance:

Public Trust

Position Description

As a Cybersecurity Operations Center (CSOC) 2nd Shift Lead, you will play a critical role in safeguarding the Department of Veterans Affairs (VA) digital assets and responding to potential cyber threats. Your primary focus will be supporting the Incident Response team in investigating and mitigating advanced and complex cyber incidents.
Hiring for 2nd shift (1430-2300 EST / 1330-2200 CST). Candidate must be willing to work onsite daily in Martinsburg, WV or Austin, TX.

Responsibilities

• Team Leadership:
  • Provide leadership and guidance to SOC analysts during your shift
  • Foster a collaborative and cohesive team environment
  • Conduct regular team meetings to discuss priorities, updates, and challenges
• Compliance and SLA Management:
  • Ensure adherence to established SLAs for incident response and resolution
  • Monitor and report on key performance indicators to meet compliance requirements
  • Work closely with management to implement improvements and efficiencies
• Triage Activities:
  • Oversee the triage process for incoming security alerts and incidents
  • Prioritize incidents based on severity and potential impact
  • Collaborate with other teams to ensure timely and effective incident response
• Technical Guidance for Cyber Investigations:
  • Serve as a subject matter expert in handling incidents of varying complexity, providing guidance and support to Tier 1 and Tier 2 analysts during investigations
  • Collaborate with the incident response team to analyze and interpret technical data
• Ensure Adherence to Standard Operating Procedures (SOPs):
  • Ensure that analysts are knowledgeable about and follow established SOPs
  • Provide training to analysts on new procedures and tools
• Continuous Improvement:
  • Proactively identify opportunities for process improvement
  • Work with the SOC management team to implement enhancements to tools, processes, and workflows
  • Stay informed about industry trends and emerging threats to enhance the SOC's capabilities
• Ensure accurate and detailed documentation of incident response activities, including analysis, actions taken, and lessons learned
• Collaborate effectively with cross-functional teams, including forensics, threat intelligence, IT, and network administrators. Clearly communicate technical information and incident-related updates to management and stakeholders

Requirements

• Bachelor's degree in computer science, cybersecurity, Information Technology, or a related field (or equivalent work experience)
• 5+ years of experience supporting large-scale IT related projects
• 3+ years of experience supporting incident response in an enterprise-level Security Operations Center (SOC)
• A deep understanding of cybersecurity principles, incident response methodologies, and a proactive mindset to ensure our SOC operates effectively in a high-pressure environment
• Industry certifications, such as CISSP, GCIH, GCFA, CEH, or equivalent, are highly desirable
• Strong experience with security technologies, including SIEM, IDS/IPS, EDR, and network monitoring tools
• Experience with enterprise ticketing systems like ServiceNow
• Excellent analytical and problem-solving skills
• Ability to work independently and in a team environment to identify errors, pinpoint root causes, and devise solutions with minimal oversight
• Ability to learn and function in multiple capacities and learn quickly
• Strong verbal and written communication skills
• U.S. citizen or legal permanent resident.
• Abilityto obtain andmaintaina Public Trust clearance

Work Authorization/Clearance:

Must be a U.S. citizen or legal permanent resident and be able to obtain a Federal Government Public Trust Clearance

• Recognized as a Top 20 "Best Place to Work in Virginia"
• Recipient of Department of Labor's HireVets Gold Medallion
• Great Place to Work Certification for five years running
• A Virginia Chamber of Commerce Fantastic 50 company
• A Northern Virginia Technology Council Tech 100 company
• Inc. 5000 list of fastest growing companies for eleven years
• Two-time SBA SBIR Tibbett's Award winner
• Virginia Values Veterans (V3) Certification

___________________________________________________________________________________________________________
We recognize that every bit of our success is the result of our teams of hard-working, motivated, and innovative professionals who are proud to call themselves part of the Revolutional family! In addition to competitive compensation, a family-focused culture, and a dynamic, productive work environment, we offer all full-time employees a variety of benefits including, but not limited to

• Traditional and HSA- eligible medical insurance plans
• 100% employer-paid dental and vision insurance options
• 100% employer-sponsored STD, LTD, and life insurance
• 5% 401(k) company matching
• Flexible-schedules and teleworking options
• Paid holidays and PTO Accrual Plans
• Paid Parental Leave
• Professional development and career growth opportunities
• Team and company-wide events, recognition, and appreciation-- and so much more!

Check out our Revolutional | LinkedIn to find out a little more about who we are and if we are the right next step for your career!Revolutional is an Equal Opportunity Employer providing equal employment opportunity to all employees and applicants for employment without regard to race, color, religion, national origin, age, gender, gender identity, sexual orientation, disability, or genetics. Revolutional does and will take affirmative action to employ and advance in employment individuals with disabilities and protected veterans. To perform the above job successfully, an individual must possess the knowledge, skills, and abilities listed; meet the education and work experience required; and must be able to perform each essential duty and responsibility satisfactorily. Other duties in addition to those listed may be assigned as necessary to meet business needs. Reasonable accommodation will be made to enable an applicant with a disability to successfully apply for and/or perform the essential duties of the job. If you are in need of an accommodation, please contact [e-mail].“Know Your Rights: Workplace Discrimination is Illegal” Poster | U.S. Equal Employment Opportunity Commission