NOC/SOC Lead — DoD RMF, ATO & Cyber Operations

Via Logic LLC; Hampton (VA); On-site; USD 116,000 - 210,000; Full time

Job summary

Leidos is seeking a cleared NOC/SOC Lead to direct combined network and security operations supporting DoD information systems, with focus on RMF and ATO lifecycle. You will lead operations staff across monitoring, incident response, and vulnerability management, ensuring evidence and compliance outputs for authorizations.

The role functions as the operational bridge between engineering, ISSMs/ISSOs, and the Authorizing Official, with responsibilities spanning ConMon, audits, and continuous

Qualifications

• Active Top Secret clearance or ability to obtain SCI
• Bachelor’s or Master’s with extensive RMF/ATO experience
• DoD 8570/8140 IAT III or IAM II certification
• 10+ years IT/IS experience with RMF/ATO
• 3+ years leading cybersecurity ops teams
• Experience developing and maintaining ATO packages in eMASS
• Experience with DoD incident handling and reporting

Responsibilities

• Lead RMF steps from categorization to continuous monitoring
• Coordinate with ISSMs/ISSOs to maintain ATO packages in eMASS
• Own POA&M process and remediation tracking
• Prepare teams for ATO assessments and reauthorizations
• Oversee system ConMon, vulnerability scans, and audit reviews
• Direct day-to-day NOC/SOC operations and incident response
• Develop SOPs/runbooks and escalation matrices
• Mentor NOC/SOC staff and coordinate training

Skills

RMF & ATO

Leadership

Cybersecurity Operations

DoD Compliance

SIEM & Monitoring

Vulnerability Scanning

Education

Bachelor’s Degree +12+ years

Tools

eMASS

ACAS/Nessus

STIG Viewer

SCAP Checker

Job description

Leidos is seeking a cleared NOC/SOC Lead to direct combined network and security operations supporting DoD information systems, with focus on RMF and ATO lifecycle. You will lead operations staff across monitoring, incident response, and vulnerability management, ensuring evidence and compliance outputs for authorizations.

The role functions as the operational bridge between engineering, ISSMs/ISSOs, and the Authorizing Official, with responsibilities spanning ConMon, audits, and continuous