Senior SOC Incident Response Lead | 24/7 Shifts

Zermount, Inc.; Arlington (VA); Hybrid; USD 120,000 - 160,000; Full time

Job summary

Zermount, Inc. is seeking an experienced Incident Response Lead to supervise a SOC shift, coordinate real-time monitoring and investigations, and deliver defensible conclusions across on-premises and cloud environments.

You will mentor junior staff, document evidence and timelines, and drive containment and remediation actions within a hybrid federal customer environment. The role requires 7+ years in cybersecurity and strong incident-analysis capability, plus experience with SIEM, endpoint

Qualifications

• Seven or more years of cybersecurity experience with hands-on SOC/incidents work.
• Demonstrated ability to solve difficult or unclear problems through deep analysis and collaboration.
• Hands-on experience with enterprise SIEM, endpoint security, network monitoring, and case-management technologies.

Responsibilities

• Lead an assigned SOC shift and coordinate monitoring, triage, incident intake, investigation, escalation, and response activities.
• Monitor alerts, logs, events, and security data for anomalous or malicious activity and determine severity, impact, and escalation.
• Receive, review, document, and coordinate suspicious-activity and incident reports from internal/external sources.
• Perform incident analysis to identify activity, affected systems, indicators of compromise, event timelines, likely cause, severity, scope, and impact.
• Correlate data to develop defensible findings and support containment, eradication, and recovery actions.
• Document evidence, confidence levels, and recommended remediation actions.
• Mentor junior analysts, review work products, and contribute to playbooks.
• Participate in exercises and surge operations.

Skills

Cybersecurity

SOC experience

Incident response

SIEM

Endpoint security

Network monitoring

Documentation

Shift work

Education

Bachelor’s degree in cybersecurity, computer science, information systems or related field

Security certifications (GCIH, GCIA, GCFA, CySA+, CEH)

Tools

Case management tools

Job description

Zermount, Inc. is seeking an experienced Incident Response Lead to supervise a SOC shift, coordinate real-time monitoring and investigations, and deliver defensible conclusions across on-premises and cloud environments.

You will mentor junior staff, document evidence and timelines, and drive containment and remediation actions within a hybrid federal customer environment. The role requires 7+ years in cybersecurity and strong incident-analysis capability, plus experience with SIEM, endpoint