Security Ops Manager

Altus Consulting Corp; Reston (VA); Presencial; USD 140 000 - 180 000; Tempo integral

Resumo da oferta

Altus Consulting Corporation is seeking a Sr. SecOps Manager to lead the 24/7/365 security operations for a federal customer in a cleared cloud SOC. You will supervise analysts, manage active alert queues, and guide incident triage and escalation.

The role is hands-on and requires collaboration with engineering to improve detections and playbooks. The position demands active TS/SCI clearance with polygraph, strong leadership, and extensive experience in SIEM/EDR, incident response, and security

Qualificações

• Five+ years of SecOps/IR experience.
• Active TS/SCI clearance with Full Scope Polygraph required.
• Hands-on with SIEM/EDR, case-management tech.

Responsabilidades

• Lead SecOps on assigned shifts and act as primary resource for analysts.
• Oversee alert queues; ensure escalation within SLAs.
• Coach analysts on triage, SIEM/EDR, investigations, escalation.
• Coordinate shift handoffs for High/Critical incidents.
• Improve detections, playbooks, and operational processes.
• Collaborate with engineers to enhance detections and runbooks.
• Support incident reporting and operational metrics.

Conhecimentos

SIEM & EDR

Incident response

Leadership

Coaching analysts

Security operations

Blue-team debugging

Communication

Kubernetes

Formação académica

CompTIA CySA+

GIAC GCIA

GIAC GCIH

CEH

CISSP

Ferramentas

Splunk

Elastic/ELK

Google Chronicle

ServiceNow

SOAR

Windows

Linux

Kubernetes

Descrição da oferta de emprego

SecOps Manager

Employment Type: Full Time

Directorate: Cyber Security Engineering

Location: Northern Virginia, Tysons Corner / Reston

Clearance: Active TS/SCI with Polygraph Required

Experience Level: Senior-Level, 5+ Years

Altus Consulting is seeking experienced SecOps Managers to lead shift operations within a 24/7/365 cleared cloud Security Operations Center supporting a mission-critical federal customer environment. The selected candidates will provide hands-on operational leadership, oversee security alert queues, guide incident triage and escalation, coach analysts, and help ensure consistent execution of security operations procedures.

This is a hands-on security operations role. SecOps Managers will work directly alongside analysts, maintain awareness of active incidents, oversee shift transitions, and collaborate with engineering teams to continually improve detections, playbooks, and operational performance.

RESPONSIBILITIES:

• Lead day-to-day SecOps activities during assigned shifts and serve as the primary technical and operational resource for analysts.
• Manage active security alert queues and ensure alerts and incidents are acknowledged, investigated, documented, and escalated within established service levels.
• Review and pre-screen technical escalations before engagement with higher-tier security engineering resources.
• Coach SecOps Analysts on alert triage, SIEM and EDR analysis, incident investigation, documentation, and escalation procedures.
• Coordinate structured shift handoffs for active High and Critical incidents.
• Identify noisy alerts, recurring false positives, ineffective playbooks, and opportunities to improve security detections and operational processes.
• Collaborate with security engineers to improve SIEM detections, response procedures, and playbooks.
• Support incident reporting, operational metrics, situational awareness, and recurring customer reporting.
• Ensure security operations procedures, runbooks, documentation standards, and customer requirements are consistently followed.
• Provide hands-on support for security playbook and runbook testing and validation.

PREFERRED SKILLS:

• Extensive experience working in a Security Operations Center or Cyber Incident Response environment.
• Strong hands-on experience with SIEM technologies such as Splunk, Elastic/ELK, Google SecOps/Chronicle, or comparable platforms.
• Experience with EDR, IDS, case management, and incident response technologies.
• Experience with ServiceNow or comparable security case-management platforms.
• Experience with Google SecOps/Chronicle, YARA-L, SOAR, Google Cloud IAM, Cloud Audit Logs, or Security Command Center.
• Knowledge of Windows and Linux operating systems, networking, vulnerability management, and security hardening.
• Experience with Kubernetes, cloud security, or air-gapped computing environments.
• Experience developing or tuning security detections and response playbooks.
• Previous experience supporting classified, SCIF, Intelligence Community, Department of Defense, or Federal cybersecurity environments.
• Strong leadership, analytical, written, and verbal communication skills.

BASIC QUALIFICATIONS:

• Active TS/SCI clearance with Full Scope Polygraph is required.
• U.S. Citizenship is required.
• Five or more years of Security Operations Center or incident response experience.
• Previous experience leading security operations shifts and coaching security analysts.
• Hands-on experience with SIEM, EDR, IDS, and security case-management technologies.
• Experience supporting Windows and Linux environments, network infrastructure, and security applications.
• Working knowledge of network analysis, vulnerability management, and security hardening practices.
• Ability to support a 24/7 operational environment, including assigned day, swing, night, weekend, or holiday coverage.
• Ability to satisfy customer-specific onboarding, access, training, and qualification requirements.

REQUIRED / QUALIFYING CERTIFICATIONS:

Candidates must possess an applicable Cyber Defense Analyst role‑qualifying certification prior to performing billable work. Applicable certifications identified for this position include:

• CompTIA CySA+
• GIAC Certified Intrusion Analyst (GCIA)
• GIAC Certified Incident Handler (GCIH)
• Certified Ethical Hacker (CEH)
• CISSP

Important Disclaimer

The information provided in this job description is accurate and truthful to the best of our knowledge. However, it is not intended to be a contract, and we reserve the right to modify the job description at any time.

Altus Consulting is dedicated to diversity and inclusion, building a work environment where everyone feels respected and valued. We firmly believe in equal opportunity, guaranteeing fair and unbiased treatment for all individuals in all aspects of employment, regardless of race, color, religion, national origin, gender, sexual orientation, gender identity, pregnancy, childbirth or related medical conditions, age, protected veteran status, or disability status. We oppose discrimination in any form, and our commitment is evident in every interaction.