SITEC - SOC Manager - MacDill AFB

Peraton; Tampa (FL); On-site; USD 86,000 - 138,000; Full time

Job summary

Peraton in Tampa, FL seeks a SOC Manager to direct enterprise-wide Defensive Cyber Operations for SITEC3. This role guides SOC Tier1-3 and leads incident response, threat hunting, and CTI integration to protect critical networks at USSOCOM endpoints worldwide.

You will establish doctrine, runbooks, and SLAs, manage staffing 24/7/365, and collaborate with architecture teams to deploy SIEM, SOAR, EDR, and related security tools across the enterprise.

Qualifications

• 12+ years of experience in defense/cyber operations.
• DoD 8570 IAT II certification is required.
• DoW TS/SCI clearance is required; DoW 8140 compliance.
• Leadership in SOC operations across multiple tiers (SOC 1–3).

Responsibilities

• Direct, orchestrate, and synchronize SOC operations across all three tiers (SOC 1, 2, 3).
• Monitor KPIs and SLAs (MTTA/MTTD/MTTR; false positives; hunt efficacy).
• Integrate CTI into proactive hunting and detection pipelines.
• Guide Detection-as-Code, SIEM rules, and SOAR playbooks to improve defense.
• Produce and maintain IRPs, CONOPS, and runbooks for repeatable execution.
• Lead recruitment, training, and 24/7 staffing; conduct drills.
• Collaborate with enterprise architecture to deploy security tech across the SOC.

Skills

DoD 8570 IAT II

TS/SCI clearance

Cyber Defense Operations

Education

DoD 8570 IAT II Certification

TS/SCI clearance

Work Role Code 531 - Cyber Defense Incident Responder Advanced

Tools

SIEM

SOAR

EDR

NDR

TIP

Job description

Responsibilities

Peraton requires a SOC Manager to support the Special Operation Command Information Technology Enterprise Contract (SITEC) - 3 EOM. This position is located at MacDill AFB in Florida.

The purpose of the Special Operations Forces Information Technology Enterprise Contract (SITEC) 3 Enterprise Operations and Maintenance (EOM) Task Order (TO) is to provide USSOCOM, its Component Commands, its Theater Special Operations Commands (TSOCs), and its deployed forces with Operations and Maintenance (O&M) services to maintain Network Operations (NetOps); maintain systems and network infrastructure; provide end user and common device support; provide configuration, change, license, and asset management; conduct training, and perform Install, Move, Add, Change (IMACs) services. The responsibilities and tasks associated with each requirement play a pivotal role to USSOCOM, the CIO/J6 organization, and ultimately the end-user who operate around the globe 24x7x365.

The SOC Manager serves as the senior operational authority responsible for directing, synchronizing, and executing enterprise-wide Defensive Cyber Operations (DCO). This role provides end-to-end operational leadership and oversight across the entire cyber defense lifecycle, leading three integrated operational pillars: SOC Tier 1 (24/7/365 Real-time Triage & Sensor Health Monitoring), SOC Tier 2 (Deep Incident Response, Containment & Detection Engineering), and SOC Tier 3 (Proactive Threat Hunting, Cyber Threat Intelligence [CTI], and Digital Forensics). The SOC Manager is accountable for establishing standardized defensive doctrine, enforcing rigorous Service Level Agreements (SLAs), driving cross-tier operational synergy, and directing high-tempo incident response during major cyber security crises. By aligning cyber threat intelligence, advanced engineering, and rapid tactical response, the SOC Manager ensures the resilience and defense of mission-critical enterprise networks against sophisticated Advanced Persistent Threat (APT) actors.

• Direct, orchestrate, and synchronize operations across all three SOC operational tiers- SOC 1 (Frontline Triage & Health), SOC 2 (IR & Detection Engineering), and SOC 3 (Threat Hunt, CTI & Forensics)- ensuring seamless cross-functional workflows, shared situational awareness, and end-to-end defensive efficacy.
• Monitor, and enforce operational KPIs and metrics (e.g., MTTA, MTTD, MTTR, false-positive ratios, hunt efficacy, detection health) across all tiers to ensure compliance with enterprise SLAs, mission requirements, and cyber defense mandates.
• Direct the operational integration of Cyber Threat Intelligence (CTI) into proactive hunting campaigns and detection pipelines; ensure SOC 3 hunt findings and intelligence products directly drive SOC 2 detection engineering and SOC 1 triage refinement.
• Guide the strategic implementation of Detection-as-Code (DaC), SIEM correlation rules (e.g., Splunk/Sentinel), and SOAR automated playbooks to streamline analyst workflows, accelerate containment, and eliminate systemic blind spots mapped against the MITRE ATT&CK framework.
• Author, review, and maintain standardized DCO doctrine, Incident Response Plans (IRPs), Concept of Operations (CONOPS), and operational runbooks across all tiers to guarantee repeatable, audit-compliant execution.
• Drive recruitment, retention, technical training paths, and 24/7/365 staffing allocations across all teams; organize regular purple team exercises, red team simulations, and tabletop drills to evaluate and enhance defensive readiness.
• Partner with enterprise architecture and engineering leads to evaluate, resource, and integrate cutting-edge security technologies (SIEM, SOAR, EDR, NDR, TIP) into the unified operational fabric of the SOC.

Qualifications

Required Qualifications:

• Minimum 12 years of experience
• DoD 8570 IAT II Certification
• DoW TS/SCI clearance
• Must be DoW 8140 compliant under the Work Role Code 531- Cyber Defense Incident Responder - Advanced level

Desired Qualifications:

• Strong analytical and problem-solving skills
• Ability to communicate security issues clearly to both technical and non-technical stakeholders
• 5+ years of technical experience with cyber tools and TTPs
• Experience managing a SOC or team of cyber professionals

Peraton Overview

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world's leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can't be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we're keeping people around the world safe and secure.

Target Salary Range

$86,000 - $138,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

EEO

EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.