Senior SOC Operations Lead 24/7 Incident Response

Booz Allen; McLean (VA); On-site; USD 99,000 - 225,000; Full time

Job summary

Booz Allen seeks a Security Operations Center (SOC) Operations Manager to lead day-to-day SOC activities for 24/7 security monitoring, detection, response, and escalation across on-premises, hybrid, Zero Trust, and cloud environments.

Leads Tier 1–3 analysts, coordinates cross-team response, and ensures SLAs, metrics, and continuous improvement. Requires Top Secret clearance and a Bachelor's degree.

Qualifications

• 10+ years in cybersecurity.
• 5+ years supporting SOCs, incident response, or cyber defense operations.
• Experience managing SOC operations, workforce planning, shift management, and analyst supervision.
• Experience with SIEM platforms such as Splunk, Microsoft Sentinel, QRadar, or security monitoring technologies.
• Knowledge of cybersecurity frameworks, including NIST CSF, NIST 800-61, MITRE ATT&CK, and Cyber Kill Chain.
• Ability to coordinate and lead response during major cybersecurity incidents.
• Top Secret clearance and Bachelor's degree.

Responsibilities

• Lead day-to-day SOC activities for 24/7 monitoring, detection, response, and escalations.
• Manage Tier 1-3 analysts, staffing, performance, incident handling, and reporting.
• Act as POC for SOC operations, customer engagement, service delivery issues, and major incidents.
• Develop staffing plans, shift schedules, on-call rotations, and surge capabilities.
• Coordinate with threat intel, threat hunting, engineering, vulnerability management, and IR teams.

Skills

SOC operations

Workforce planning

Incident response

Analyst supervision

Shift management

Service delivery

Threat coordination

Education

Bachelor's degree

Tools

Splunk

Microsoft Sentinel

QRadar

Job description

Booz Allen seeks a Security Operations Center (SOC) Operations Manager to lead day-to-day SOC activities for 24/7 security monitoring, detection, response, and escalation across on-premises, hybrid, Zero Trust, and cloud environments.

Leads Tier 1–3 analysts, coordinates cross-team response, and ensures SLAs, metrics, and continuous improvement. Requires Top Secret clearance and a Bachelor's degree.