Senior Cybersecurity Watch Operations SME (TS/SCI)

Invictus International Consulting, LLC; Alexandria (VA); On-site; USD 145,000 - 196,000; Full time

Job summary

Invictus International Consulting, LLC is seeking a Cybersecurity Watch Operations Subject Matter Expert IV in the Alexandria, VA area. The role serves as the senior hands-on technical authority for SOC watch operations and the maturation of a new DoD SOC, directing advanced investigations and incident response activities.

You will mentor analysts, coordinate with government stakeholders, and translate requirements into telemetry, SIEM/SOAR, and network-monitoring capabilities.

Qualifications

• Bachelor's degree in a technical discipline or equivalent experience.
• Minimum eight years of relevant experience in SOC operations, cyber defense, and incident response.
• Expert hands-on experience leading complex investigations and establishing procedures.
• Strong knowledge of enterprise networking, network security monitoring, and adversary TTPs.
• DoD 8570 IAT II or IAM II certification is required.
• Current TS/SCI clearance with CI polygraph capability.

Responsibilities

• Serve as senior technical authority for SOC watch operations and maturation of a new DoD SOC.
• Lead complex cyber defense investigations and provide technical direction when needed.
• Perform advanced forensic and security analysis of host/network telemetry and related data.
• Develop and improve SOPs, runbooks, and incident-response playbooks.

Skills

SOC operations

Incident response

Forensic analysis

DoD cybersecurity

Mentoring

Lead investigations

Education

Bachelor's degree in technical discipline

4 years experience in lieu of degree

Tools

SIEM/SOAR

Network monitoring

Threat hunting

Job description

Invictus International Consulting, LLC is seeking a Cybersecurity Watch Operations Subject Matter Expert IV in the Alexandria, VA area. The role serves as the senior hands-on technical authority for SOC watch operations and the maturation of a new DoD SOC, directing advanced investigations and incident response activities.

You will mentor analysts, coordinate with government stakeholders, and translate requirements into telemetry, SIEM/SOAR, and network-monitoring capabilities.