Senior 24/7 DoD Cyber Operations SOC Lead (TS/SCI)

GCyber; Shiloh (IL); Hybrid; USD 120,000 - 180,000; Full time

Job summary

GCyber seeks a Cybersecurity Operations Team Lead to direct a 24/7 security operations center supporting a large Department of War agency. You will guide incident decisions, lead response, and improve procedures through performance analysis.

You will mentor analysts, maintain shift coverage, and ensure timely reporting. The role requires DoD-related experience and active TS/SCI clearance.

Qualifications

• 7+ years in security analytics, incident response, threat analysis or security engineering.
• Bachelor's degree; 4 additional years of experience may substitute.
• CISSP and GCIH or GCIA certifications.
• Active TS/SCI clearance; complete required tool training before system access.

Responsibilities

• Lead a 24/7 monitoring, incident response, and forensics team.
• Serve as escalation point for all shifts.
• Manage incident declaration, escalation, and reporting to USCYBERCOM and JFHQ-DODIN.
• Oversee watch schedules, leave coverage, and staffing for continuous operations.
• Lead shift briefings, handoffs, and reviews; address recurring issues.
• Analyze triage, detection, and response metrics; implement improvements.
• Approve automated response actions under tiered approval.

Skills

Security analytics

Incident response

Threat analysis

Security engineering

Leadership

CISSP

GCIH

GCIA

TS/SCI clearance

Education

Bachelor's degree

Tools

SIEM

EDR

Job description

GCyber seeks a Cybersecurity Operations Team Lead to direct a 24/7 security operations center supporting a large Department of War agency. You will guide incident decisions, lead response, and improve procedures through performance analysis.

You will mentor analysts, maintain shift coverage, and ensure timely reporting. The role requires DoD-related experience and active TS/SCI clearance.