Senior Security Operations Manager (SOC Lead)

Guidehouse; Washington (District of Columbia); On-site; USD 149,000 - 248,000; Full time

Job summary

Guidehouse is seeking a highly skilled SOC Manager to lead 24/7 security operations for critical consular systems. You will oversee SIEM and OSINT activities, coordinate with ISSOs, perform forensics, and drive incident containment per RMF and A&A requirements.

The role requires a SECRET clearance, US citizenship, and strong leadership with SAT/POA&M experience. DC-area work supports government-focused cybersecurity programs with extensive log retention.

Qualifications

• Minimum 7+ years of overall work experience.
• Active CISSP, GCIA or equivalent certification.
• Must obtain and maintain a Federal or DoD SECRET clearance.
• U.S. Citizenship is required.
• Strong familiarity with SIEM platforms, EDR, and SOAR workflow automation.
• Experience developing and maintaining detection use cases, playbooks, and investigative procedures.
• Experience defining and reporting SOC metrics and KPIs.
• Excellent written and verbal communication skills.
• Proven leadership including coaching, performance management, and 24/7 scheduling.

Responsibilities

• Implement and operate SIEM processes for Oracle systems and develop correlation rules.
• Monitor SIEM alerts and investigate anomalies.
• Provide SIEM data to ISSOs for incident response coordination.
• Perform OSINT monitoring for Oracle threats.
• Conduct forensics and log analysis on Oracle audits and logs.
• Support ISSO-led incident response with containment and remediation.
• Document incident actions for reports to ISSO.
• Maintain long-term storage of security logs and audit data per retention requirements.
• Conduct technical security reviews of Oracle configurations and identify weaknesses.

Skills

Leadership

Communication

Incident response

SOC metrics

Coaching

Education

Bachelor's degree

Tools

SIEM

EDR

SOAR

Job description

Guidehouse is seeking a highly skilled SOC Manager to lead 24/7 security operations for critical consular systems. You will oversee SIEM and OSINT activities, coordinate with ISSOs, perform forensics, and drive incident containment per RMF and A&A requirements.

The role requires a SECRET clearance, US citizenship, and strong leadership with SAT/POA&M experience. DC-area work supports government-focused cybersecurity programs with extensive log retention.