Senior SOC Lead: Incident Response & Threat Analytics

Leidos Inc; Alexandria (VA); On-site; USD 131,000 - 237,000; Full time

Job summary

Leidos is seeking a Security Operations Center (SOC) Lead in Alexandria, VA, to direct day-to-day SOC activities and manage 24x7 incident response operations for the DISA GSM-O program. The role requires a TS/SCI clearance, a strong background in cybersecurity, and hands-on leadership of large, complex SOC teams.

The position emphasizes advancing incident handling, report quality, and adoption of new tools and frameworks, with a focus on automation and process improvements within a high-tempo

Qualifications

• Active TS/SCI security clearance required.
• Bachelor's degree and 10+ years of cybersecurity experience; substitutions allowed.
• 4+ years supervising and/or managing teams.
• 5+ years of intrusion detection and/or incident handling experience.
• DoD 8140 Cyber Defense Analyst (511) Intermediate requirements.
• Advanced knowledge of planning, directing and managing SOC/CIRT operations in a large, complex environment.
• Strong written and verbal communication skills; ability to create technical reports.
• Must be a US Citizen.
• Mature understanding of industry standards for incident response and SOC operations.

Responsibilities

• Plan, direct, and manage day-to-day activities across the Security Operations Center and high-tempo incident response when required.
• Ensure SOC personnel adhere to documented processes for triage, analysis, incident response, and reporting.
• Drive implementation and adoption of new tools, capabilities, frameworks, and methodologies across all SOC teams.
• Accountable for timeliness and quality of reporting produced by the SOC.
• Instill best practices in incident response, cybersecurity analysis, case and knowledge management, and SOC operations.
• Promote automation and process efficiencies.

Skills

Leadership

Incident response

Cybersecurity analysis

Communication

Education

Bachelor's degree

DoD 8140 Cyber Defense Analyst (511)

Job description

Leidos is seeking a Security Operations Center (SOC) Lead in Alexandria, VA, to direct day-to-day SOC activities and manage 24x7 incident response operations for the DISA GSM-O program. The role requires a TS/SCI clearance, a strong background in cybersecurity, and hands-on leadership of large, complex SOC teams.

The position emphasizes advancing incident handling, report quality, and adoption of new tools and frameworks, with a focus on automation and process improvements within a high-tempo