Remote SOC Operations Leader (24/7 Cyber Defense)

Booz Allen Hamilton; Washington (District of Columbia); On-site; USD 99,000 - 225,000; Full time

Job summary

Booz Allen is seeking a Security Operations Center (SOC) Operations Manager to lead day-to-day SOC activities for 24/7 security monitoring, detection, response, and escalation across on-prem, hybrid, Zero Trust, and cloud environments. You will manage SOC personnel and ensure service delivery excellence for diverse client environments.

The role requires 10+ years in cybersecurity, with 5+ years in SOC operations and incident response, plus experience with SIEMs like Splunk, Microsoft Sentinel,

Qualifications

• 10+ years of experience with cybersecurity.
• 5+ years of experience supporting SOCs, incident response, or cyber defense operations.
• Experience managing SOC operations, including workforce planning, shift management, and analyst supervision.
• Experience with SIEM platforms such as Splunk, Microsoft Sentinel, QRadar, or security monitoring technologies.
• Knowledge of security monitoring, incident response, threat detection, escalation procedures, and cyber defense operations.
• Knowledge of cybersecurity frameworks, including NIST CSF, NIST 800-61, MITRE ATT&CK, and Cyber Kill Chain methodologies.
• Ability to coordinate and lead response activities during major cybersecurity incidents.

Responsibilities

• Serve as the operational manager for the SOC and be responsible for workforce management, shift scheduling, analyst performance, incident response coordination, and operational reporting.
• Act as the designated point of contact for SOC operations, customer engagement, service delivery issues, and major incident escalations.
• Develop and maintain 24/7 staffing plans, shift schedules, on-call rotations, and surge support capabilities to ensure continuous monitoring and response coverage.
• Oversee Tier 1-3 analyst activities, manage incident handling processes, ensure adherence to SLAs and operational metrics, and drive continuous improvement initiatives across SOC operations.
• Coordinate with threat intelligence, threat hunting, engineering, vulnerability management, and incident response teams to ensure effective detection, investigation, and remediation of cybersecurity threats.

Skills

Cybersecurity

SOC operations

Incident response

Workforce planning

Analyst supervision

Threat detection

Communication skills

Education

Bachelor’s degree

Tools

Splunk

Microsoft Sentinel

QRadar

Job description

Booz Allen is seeking a Security Operations Center (SOC) Operations Manager to lead day-to-day SOC activities for 24/7 security monitoring, detection, response, and escalation across on-prem, hybrid, Zero Trust, and cloud environments. You will manage SOC personnel and ensure service delivery excellence for diverse client environments.

The role requires 10+ years in cybersecurity, with 5+ years in SOC operations and incident response, plus experience with SIEMs like Splunk, Microsoft Sentinel,