Senior DoD SOC Watch Operations SME – TS/SCI

Invictus International Consulting, LLC.; Colorado Springs (CO); On-site; USD 150,000 - 190,000; Full time

Job summary

Invictus International Consulting, LLC. is seeking a Cybersecurity Watch Operations SME IV to serve as the senior technical authority for SOC watch operations at a DoD facility. You will lead complex investigations, perform advanced forensics, and drive improvements in incident workflows and escalation criteria.

The role requires TS/SCI clearance with CI polygraph eligibility, hands-on SOC expertise, and experience maturing SOC capabilities within DoD or IC environments.

Qualifications

• Bachelor's degree in a technical discipline; 4 years may substitute for degree.
• Minimum 8 years of relevant SOC/incident-response experience.
• Current DoD 8570 IAT II or IAM II certification.
• Active TS/SCI clearance with ability to obtain/maintain CI polygraph.

Responsibilities

• Serve as the senior hands-on technical authority for SOC watch operations.
• Lead the most complex cyber defense investigations and incident-response activities.
• Perform advanced forensic and security analysis of telemetry and artifacts.
• Establish and continuously improve investigation methodology and workflows.
• Provide senior technical guidance on watch readiness and staffing.
• Coordinate complex incidents with government stakeholders and agencies.
• Mentor analysts and develop SOPs, runbooks, and training scenarios.
• Conduct proactive threat hunting and validate defenses.

Skills

SOC operations

Incident response

Advanced forensics

Threat hunting

Mentoring

SOPs & runbooks

Education

Bachelor's degree in technical discipline

Tools

SIEM/SOAR

Job description

Invictus International Consulting, LLC. is seeking a Cybersecurity Watch Operations SME IV to serve as the senior technical authority for SOC watch operations at a DoD facility. You will lead complex investigations, perform advanced forensics, and drive improvements in incident workflows and escalation criteria.

The role requires TS/SCI clearance with CI polygraph eligibility, hands-on SOC expertise, and experience maturing SOC capabilities within DoD or IC environments.