Lead SOC Manager - Incident Response & Threat Hunting

Cybersecurity Jobs; Los Angeles (CA); Vor Ort; USD 180.000 - 240.000; Vollzeit

Benefits dieser Stelle

Medical, dental, and vision benefits

401k with company match

FSA

HSA

Life insurance

Relocation assistance

Unlimited PTO

Casual dress code

Zusammenfassung

CHAOS Industries seeks a seasoned SOC leader to shape daily operations, drive detection engineering, and act as incident commander while ensuring evidence trails for assessments. You will coordinate across IT, labs, and production networks, leading response and improvement efforts in a regulated environment.

The role demands deep proficiency with SIEM/EDR/SOAR, scripting in Python/PowerShell, and experience in defense/compliance settings. On-site presence in Los Angeles area is expected.

Qualifikationen

• 8+ years in security operations, incident response, or threat hunting.
• Experience in regulated defense, aerospace, or federal environments handling CUI/export data.
• Track record of leading major incidents end to end with executive communication.

Aufgaben

• Define the SOC operating model including coverage hours, on-call rotation, escalation tiers, and staff/partner split.
• Hire, train, and retain analysts and detection engineers with clear career paths and high technical bar.
• Write and maintain playbooks, runbooks, and standard operating procedures used by the SOC.
• Own the SOC budget, tooling roadmap, and vendor relationships.
• Own log source coverage and detection content across enterprise IT, CUI enclave, cloud, labs, and networks.
• Lead detection engineering, map coverage to MITRE ATT&CK, tune to reduce noise, test detections, retire ineffective ones.
• Lead proactive threat hunts based on intelligence on actors targeting the defense industrial base.
• Ingest government threat sharing (DC3/DCISE, NSA C3).
• Serve as incident commander through triage, containment, eradication, recovery, lessons learned.
• Meet DFARS 252.204-7012 obligations including 72-hour reporting to DoD and malware submission.
• Coordinate with Legal, Export Compliance, FSO, HR on CUI/ITAR/EAR data and personnel.
• Run tabletop exercises and purple-team engagements quarterly; close gaps exposed.
• Operate data loss monitoring for CUI/exported data across endpoints, email, cloud, and code repos.
• Support insider threat programs with monitoring, investigation, and evidence handling for legal/regulatory review.
• Monitor AI/SaaS usage against data within compliance boundary.
• Produce evidence for CMMC Level 2 and NIST SP 800-171 assessments across Audit/IR/Risk/Systems.

Kenntnisse

Incident response leadership

Threat hunting

Executive communication

Scripting: Python/PowerShell

Ausbildung

Bachelor's degree in a technical field

Tools

SIEM

EDR

SOAR

Python

PowerShell

Jobbeschreibung

CHAOS Industries seeks a seasoned SOC leader to shape daily operations, drive detection engineering, and act as incident commander while ensuring evidence trails for assessments. You will coordinate across IT, labs, and production networks, leading response and improvement efforts in a regulated environment.

The role demands deep proficiency with SIEM/EDR/SOAR, scripting in Python/PowerShell, and experience in defense/compliance settings. On-site presence in Los Angeles area is expected.