Senior SOC Watch Ops SME - Incident Response

Invictus International Consulting, LLC.; Alexandria (VA); On-site; USD 150,000 - 190,000; Full time

Job summary

Invictus International Consulting, LLC. in Alexandria, VA seeks a Cybersecurity Watch Operations Subject Matter Expert IV. This senior role leads advanced investigations, defines SOC standards, and mentors analysts within a DoD/IC context. A TS/SCI clearance with CI polygraph is required to engage on highly sensitive assignments.

The role emphasizes hands-on leadership in incident response, forensics, and operational risk management, with collaboration across government and engineering teams.

Qualifications

• Bachelor's degree or higher; 8+ years of relevant experience.
• Expert-level hands-on experience in SOC operations, cyber defense, and incident response.
• Proven ability to lead complex investigations and establish SOC procedures.
• DoD 8570 IAT II or IAM II certification is required.
• Active TS/SCI with CI polygraph and DoD/IC experience preferred.

Responsibilities

• Serve as senior hands-on technical authority for SOC watch operations.
• Lead the most complex cyber defense investigations and incident-response activities.
• Perform advanced forensic and security analysis of digital information and telemetry data.
• Establish and continuously improve investigative workflows, SOPs, and playbooks.
• Coordinate incidents with government stakeholders and other agencies as required.
• Translate watch-operations requirements into telemetry, SIEM/SOAR, and network/endpoint capabilities.
• Mentor SOC analysts and provide senior escalation support.

Skills

SOC operations

Incident response

Forensic analysis

Network security monitoring

SIEM/SOAR

Education

Bachelor's degree in a technical field

4 years substitution allowed

Tools

SIEM

SOAR

Network analysis tools

Job description

Invictus International Consulting, LLC. in Alexandria, VA seeks a Cybersecurity Watch Operations Subject Matter Expert IV. This senior role leads advanced investigations, defines SOC standards, and mentors analysts within a DoD/IC context. A TS/SCI clearance with CI polygraph is required to engage on highly sensitive assignments.

The role emphasizes hands-on leadership in incident response, forensics, and operational risk management, with collaboration across government and engineering teams.