Senior SOC Team Lead - Federal Incident Response

Revolutional, LLC; New Carrollton (MD); Presencial; USD 140 000 - 190 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Health insurance

401(k) matching

Paid time off

Resumo da oferta

Revolutional is seeking a SOC Team Lead to operate in a 24x7x365 SOC supporting a large federal agency. The role coordinates incident reports, leads analysts, and ensures timely recording and escalation, onsite at New Carrollton, MD or Memphis, TN.

The successful candidate will have a BS in a related field and 7+ years of experience, with expertise in NIST guidelines, SOC operations, and SIEM/SOAR platforms. This onsite position requires U.S.

Qualificações

• Bachelor’s degree in Cybersecurity, CS, Information Systems, Engineering, or a related field and 7+ years of relevant professional experience; three (3) years of additional relevant experience may be substituted in lieu of a degree.
• Seasoned technical individual contributor, fully proficient in applying technical principles, theories, and concepts in the field.
• Ability to develop solutions to technical problems and issues that are difficult, unclear, and require deep technical knowledge.
• Deep understanding of the principles, theories, and concepts of the technical domain, with broad understanding of related specialty areas.
• Experience with SOC incident intake, ticketing, and case management in a large enterprise.
• Working knowledge of NIST SP 800-61 and federal incident reporting requirements.
• Experience leading a team or serving as a task lead, including assigning work, reviewing quality, and reporting status to client leadership.

Responsabilidades

• Serve as task lead for incident report acceptance and coordination, assigning and reviewing the work of SOC analysts.
• Receive, review, document, and coordinate reports of suspicious cyber activity or potential incidents from authorized sources, including internal personnel, organizational components, other contractors, third-party service providers, CISA, and partner SOCs.
• Monitor approved communication channels for incoming incident reports, suspicious activity reports, and situational awareness updates.
• Record, validate, and update incident information in approved tracking systems.
• Refer potential incidents to appropriate SOC personnel, client stakeholders, or other authorized parties for further review or action.
• Coordinate incident handling activities across relevant SOC functions under client direction.
• Maintain incident documentation, including actions taken, findings, timelines, and escalation history.
• Escalate incidents, issues, and required decisions to the client SOC team in accordance with established procedures.
• Support required incident reporting in accordance with organizational, contractual, and regulatory guidance.
• Verify that incident records contain sufficient information to support closure only after required remediation, coordination, and reporting have occurred

Conhecimentos

SOC incident management

Team leadership

Incident coordination

NIST SP 800-61

Federal incident reporting

SOC ticketing

Formação académica

Bachelor's degree in Cybersecurity / CS / IS / Eng

Ferramentas

SIEM

SOAR

CISA coordination

Descrição da oferta de emprego

Revolutional is seeking a SOC Team Lead to operate in a 24x7x365 SOC supporting a large federal agency. The role coordinates incident reports, leads analysts, and ensures timely recording and escalation, onsite at New Carrollton, MD or Memphis, TN.

The successful candidate will have a BS in a related field and 7+ years of experience, with expertise in NIST guidelines, SOC operations, and SIEM/SOAR platforms. This onsite position requires U.S.