Senior SOC Lead: Cloud IR, Forensics & Threat Hunting

iDme Technologies Corp; McLean (VA); On-site; USD 96,000 - 112,000; Full time

Benefits offered by this job

Medical, dental, vision benefits

401(k) with company match

Paid time off (PTO)

Job summary

ID.me is seeking a highly experienced SOC Lead to drive incident response, threat hunting, and forensics across cloud-native environments. You will lead complex security incidents, refine processes, and mentor junior analysts within our Security Operations team.

The role emphasizes cloud security (GCP, Kubernetes), SIEM tooling (Chronicle, Splunk), and leveraging AI/ML to accelerate response. On-site, senior-level leadership is expected.

Qualifications

• 8+ years in information security with hands-on incident response, threat hunting, and forensic analysis.
• 2+ years in a lead SOC role and responding to sophisticated threats.
• 2+ years of experience in cloud environments (preferably GCP) with Kubernetes/workloads.
• 4+ years using security tools (DLP, SIEM, IDS/IPS, EDR, firewalls).

Responsibilities

• Lead cyber security incident response for cloud-native infra and CI/CD pipelines.
• Coordinate containment, remediation, and root-cause analysis across cloud workloads.
• Oversee host and network-based forensic collection and analysis for containment and recovery.
• Mitigate insider threats and incidents using advanced security tools.
• Conduct proactive threat hunting and respond to IOC and APT TTPs.
• Mentor junior SOC analysts and improve SOC SOPs.
• Collaborate with Tier 2/3 and cross-functional teams for incident reporting.
• Maintain awareness of risks in cloud-native environments and drive improvements.

Skills

Incident response

Threat hunting

Forensic analysis

Kubernetes security

CI/CD security

Cloud security

Python scripting

Leadership

Team mentoring

Security operations

Education

GCIA

GCIH

GCFA

CISSP

CKS (Kubernetes Security)

B.S. in CS/IT

Tools

Chronicle

Splunk

EDR

IDS/IPS

GCP

Kubernetes

Job description

ID.me is seeking a highly experienced SOC Lead to drive incident response, threat hunting, and forensics across cloud-native environments. You will lead complex security incidents, refine processes, and mentor junior analysts within our Security Operations team.

The role emphasizes cloud security (GCP, Kubernetes), SIEM tooling (Chronicle, Splunk), and leveraging AI/ML to accelerate response. On-site, senior-level leadership is expected.