Senior SOC Lead: Incident Response & Threat Hunting

ECS Corporate Services; Fairfax (VA); On-site; USD 135,000 - 150,000; Full time

Job summary

ECS Corporate Services is seeking a Senior SOC Analyst (SOC Lead) to help develop processes, procedures, and automations for rapid ingestion, correlation, and analysis of event messages to identify IoCs. The ideal candidate has a mature 24x7 SOC background and is a thoughtful, continuous learner.

The role focuses on monitoring SIEM and on‑premises/cloud environments, leading incident investigations, and developing SOPs and playbooks.

Qualifications

• 5+ years in cybersecurity operations & incident response.
• 3+ years in a SOC environment and 2+ years in a leadership role.
• Ability to interpret complex cybersecurity topics and present information to executives and stakeholders.
• Experience with two or more analysis tools used in CIRT or similar investigations.
• Strong knowledge of SIEM, EDR, IDS/IPS, malware analysis, and vulnerability management.

Responsibilities

• Monitor and manage threats; investigate escalations from the SOC.
• Maintain SOPs, technical playbooks, and run books for SOC operations.
• Lead incident investigations, coordinate with SOC staff, and remediate IoCs.
• Develop reports to meet SOC leadership requirements and directives.
• Provide training and mentorship to SOC analysts to improve incident handling.

Skills

SOC leadership

Threat monitoring

Incident response

Stakeholder comms

Education

Bachelor's degree in cybersecurity

Tools

QRadar

Splunk

CrowdStrike

Tenable

Job description

ECS Corporate Services is seeking a Senior SOC Analyst (SOC Lead) to help develop processes, procedures, and automations for rapid ingestion, correlation, and analysis of event messages to identify IoCs. The ideal candidate has a mature 24x7 SOC background and is a thoughtful, continuous learner.

The role focuses on monitoring SIEM and on‑premises/cloud environments, leading incident investigations, and developing SOPs and playbooks.