Senior SOC Lead: Incident Response & Team Leadership

JFL CONSULTING, LLC; Springfield (VA); On-site; USD 170,000 - 220,000; Full time

Benefits offered by this job

Health insurance

Dental & vision

FSAs

Life insurance

Disability

401(k)

PTO 15/5/2/11

Cert reimbursement

Job summary

JFL Consulting, LLC in Springfield, VA is seeking a SOC Lead to serve as senior authority for all SOC shifts, directing the shift teams, managing alert queues, escalation decisions, and ensuring all incidents are tracked and handed off.

Ideal candidate has 10+ years in SOC, 3+ years in lead roles, CISSP/CISM/CISA or GCIH, and strong SIEM/EDR/forensics expertise. This role requires nights, weekends, and holidays on a rotating schedule.

Qualifications

• 10+ years SOC or similar experience.
• At least 3+ years in a senior or lead role.
• Bachelor's degree in Cyber Security, Information Technology, Computer Science, or related field; or four extra years of relevant work experience.
• Certifications: CISSP, CISM, CISA, or GCIH.
• Additional: Sec+, CYSA+, SecX, CEH, GCIA, GSOC.
• Hands-on incident response including containment, eradication, and recovery.
• Advanced SIEM and log analysis experience.
• PCAP analysis tools experience (Wireshark, NetworkMiner).
• EDR, memory forensics, and network forensics tools.
• MITRE ATT&CK understanding and attacker TTPs.
• Willingness to work nights, weekends, and holidays on rotating shifts.
• Experience mentoring junior analysts.

Responsibilities

• Provide Tier 4 escalation and resolution for the most complex incidents.
• Direct daily SOC shift operations and monitoring.
• Triage alerts within SLA and coordinate with Tier 1-3 analysts.
• Make escalation decisions to activate T3/IR and on-call staff.
• Oversee shift handoffs and turnover briefings.
• Mentor SOC staff and junior analysts.
• Review Priority 2+ tickets before escalation.
• Develop and update playbooks and ensure proper usage.
• Maintain situational awareness across alerts and monitoring.
• Coordinate with NOC on security-related network issues.
• Review shift logs and required reporting.

Skills

SOC Leadership

Incident Response

SIEM

Threat Hunting

PCAP Analysis

EDR / Forensics

Mentoring

MITRE ATT&CK

Education

Bachelor's in Cyber Security

Tools

Wireshark

Ghidra

IDA Pro

KQL

SPL

NetworkMiner

Job description

JFL Consulting, LLC in Springfield, VA is seeking a SOC Lead to serve as senior authority for all SOC shifts, directing the shift teams, managing alert queues, escalation decisions, and ensuring all incidents are tracked and handed off.

Ideal candidate has 10+ years in SOC, 3+ years in lead roles, CISSP/CISM/CISA or GCIH, and strong SIEM/EDR/forensics expertise. This role requires nights, weekends, and holidays on a rotating schedule.