NOC / SOC Technician (2nd Shift)

Relha LLC; Hampton, Northern (VA, KY); Hybrid; USD 70,000 - 126,000; Full time

Job summary

Leidos Defense Sector at Langley AFB, VA seeks a NOC/SOC Technician (2nd Shift) to monitor DoD networks after hours, triage alerts, and contain threats across a blended NOC/SOC function.

The role is on-site with core hours 4:00 PM to 12:00 AM; candidates must hold active DoD TS/SCI clearance and have 1–3+ years in IT security or related fields. Weekend and holiday coverage is required.

Qualifications

• Bachelor’s degree with 2+ years of experience or Master’s with 1+ year.
• Active DoD TS/SCI clearance.
• 1–3+ years in IT security or related field.
• Familiarity with enterprise SIEM/EDR and monitoring tools.

Responsibilities

• Continuous Monitoring: Oversee SIEM and network dashboards for threats and outages.
• Incident Triage & Response: Diagnose, contain threats, and distinguish real incidents.
• Escalation & Handoff: Escalate to Tier 2/3 and write shift handover reports.
• Maintenance & Troubleshooting: Assist with routing, connectivity, backups, and patching.

Skills

IT security

Network administration

Incident triage

Clearance TS/SCI

Education

Bachelor’s degree

Master’s degree

Tools

Splunk

CrowdStrike

Microsoft Sentinel

SolarWinds

Job description

The Defense Sector at Leidos is currently looking for a NOC / SOC Technician (2nd Shift) to join our team at Langley AFB, VA. The NOC / SOC Technician (2nd Shift) provides continuous, after-hours monitoring and defense of DoD networks, blending network operations (NOC) and cybersecurity (SOC) functions across an evening and rotational shift. This role independently triages alerts, troubleshoots system and connectivity issues, contains active threats, and documents incidents to ensure a seamless handover to day-shift teams.

This position requires daily on-site work at Langley, AFB. The core hours for this position are considered to be 4:00 PM to 12:00 AM.

Roles and Responsibilities:

• Continuous Monitoring: Watch over SIEM and network performance dashboards to detect security threats and infrastructure outages.
• Incident Triage & Response: Separate real incidents from false alarms, run initial diagnostics, and contain active network or security anomalies.
• Escalation & Handoff: Escalate high-severity incidents to Tier 2/3 engineering teams or Incident Responders and write detailed shift-handover reports.
• Maintenance & Troubleshooting: Assist with routing, connectivity issues, backup restorations, and software patch management during off-peak hours.

Required Qualifications:

• Bachelor’s degree with 2+ years of experience or a Master’s degree with 1+ year of experience. Additional experience may be considered in lieu of a degree.
• Security Clearance: Active DoD TS/SCI security clearance.
• Experience: 1-3+ years of hands-on experience in IT security, network administration, or a related field.
• Technical Skills: Basic familiarity with enterprise SIEM/EDR and monitoring tools (e.g., Splunk, CrowdStrike, Microsoft Sentinel, SolarWinds).
• Shift Flexibility: Willingness to work evening and rotational shifts (e.g., 3:00 PM-11:00 PM), including weekends and holidays.
• Soft Skills: Strong problem-solving, sound decision-making under pressure, and the ability to work independently with minimal oversight.

Preferred Qualifications:

• Toolset Familiarity: Exposure to Security Onion, Juniper SSR, Cisco switching, Wireshark, ServiceNow, or Jira Service Manager.
• Advanced Certifications: CompTIA CySA+ or Network+.
• Prior DoD/Military Experience: Previous NOC or SOC experience in a DoD, military, or cleared environment.
• Packet Analysis: Familiarity with packet capture and protocol analysis tools.

Pay Range:

Pay Range $69,550.00 - $125,725.00

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.