SOC Lead (Top Secret) - 174316

ZP Group; Manassas (VA); On-site; USD 170,000 - 200,000; Full time

Benefits offered by this job

PTO

11 paid holidays

Medical insurance

Dental insurance

Vision insurance

401k

Job summary

Zachary Piper Solutions seeks a SOC Lead to support a DOE/NNSA program in Manassas, VA on-site. The role directs the SOC team, leads incident response, and improves detection capabilities to protect sensitive assets.

Requirements include active TS clearance or DOE Q, 10+ years cybersecurity, 4+ years leadership, and CISSP/CISM/GCIH/GCIA or equivalent. The position offers full benefits and long-term program, with 100% on-site work in Manassas and potential commute to DC.

Qualifications

• Active Top Secret clearance and/or DOE Q is required
• Bachelor’s degree in related discipline and 10+ years of cybersecurity
• 4+ years of leadership experience in security teams
• Certifications such as CISSP, CISM, GCIH, GCIA are highly preferred
• Experience in network defense, incident response, threat detection, vulnerability management, and security operations
• Experience leading incident response for intrusions, malware, and data breaches
• Ability to analyze large volumes of data (network traffic, logs, threat intel)

Responsibilities

• Oversee, direct, and mentor the SOC team for daily operations
• Guide SOC analysts to improve performance and skills
• Lead the SOC team in identifying, analyzing, and responding to cybersecurity incidents
• Reconstruct timelines from network defense data to analyze intrusions
• Develop and enhance threat detection capabilities to identify risks
• Analyze network traffic, system logs, and threat intel to uncover threats
• Coordinate with IT and cybersecurity teams for enterprise incident response
• Develop strategies to mitigate risks to intellectual property and sensitive assets
• Manage configuration and administration of SIEM, IDS/IPS, endpoint protection, and monitoring tools
• Maintain incident documentation with analyses, findings, and mitigation steps

Skills

leadership

incident response

threat detection

SIEM

IDS/IPS

security operations

forensics

risk assessment

communication

Education

Bachelor’s degree in related discipline

Tools

Splunk

Wireshark

PCAP analysis

Job description

Zachary Piper Solutions is seeking a SOC Lead to support a critical program for Department of Energy, National Nuclear Security Administration in Manassas, VA. The team is seeking an experienced cyber incident responder to lead detection and response of cyber incidents and provide recommendations to improve methodologies to protect the organizations intellectual property from evolving threats.

Clearance: Active Top Secret Clearance and/or DOE Q

Location: Manassas, VA (100% on-site), ability to commute to Washington, D.C. initially

This job opens for applications on 9/14/2026 Applications for this job will be accepted for at least 30 days from the posting date

Responsibilities of the SOC Lead:

• Oversee, direct, and mentorthe SOC team, ensuring smooth and efficient daily operations.
• Offer guidance, feedback, and trainingto SOC analysts to enhance their performance and skills.
• Lead the SOC teamin identifying, analyzing, and responding to cybersecurity incidents, such as intrusions, malware, and data breaches.
• Reconstruct timelinesfrom network defense data to analyze intrusions and attacks.
• Serve as the escalation pointfor Develop and enhance threat detection capabilitiesto proactively identify emerging risks and vulnerabilities.
• Analyze network traffic, system logs, and threat intelligence datato uncover potential threats.
• complex or high-priority incidents, ensuring proper resolution.
• Collaborate with IT and cybersecurity teamsto support enterprise-wide incident response and threat mitigation.
• Develop and implement strategies to mitigate risks to intellectual property and other sensitive assets.
• Manage the configuration, optimization, and administrationof security tools, including SIEM (Security Information and Event Management), IDS/IPS (Intrusion Detection/Prevention Systems), endpoint protection, and other monitoring solutions.
• Maintain accurate and detailed documentation of security incidents, including analysis, findings, and mitigation steps.

Qualifications of the SOC Lead:

• Active Top Secret and/or DOE Q clearance
• Bachelor’s degree from an accredited college in a related discipline and 10+ years of cybersecurity experience, 4+ years of leadership experience
• Certifications: CISSP, CISM, GCIH, GCIA, or equivalent are highly preferred
• Experience in network defense, incident response, threat detection, vulnerability management, and security operations
• Experience leading incident response efforts, including network intrusions, malware, and data breaches
• Analyze large volumes of data (network traffic, logs, threat intelligence)

Compensation of the SOC Lead:

• Total compensation based on experience level - $170,000-$200,000 **based on experience level**
• Full Benefits: PTO, 11 Paid Holidays, Medical, Dental, and Vision, 401k with ADP
• Long-term program (3.5 years remaining)

#LI-MK1 #LI-Onsite

Keywords:Threat analysis, Microsoft defender, MS, Defender, azure, CI, Counter intelligence, CI Polygraph, VM, virtual machines, M365, Sentinel, Sentinel One, SentinelOne, forensics, spring, cloud, SIEM, EDR, endpoint, SOC, engineer, onsite, on-site, Manassas, engineering, cyber security engineer, cyber analyst, malware detection, adversary profiling, vulnerability assessment, Incident response, intellectual, SOC, leadership, manager, management, SOC lead, GCIH, CISSP,threat hunting, phishing campaigns, cyber forensics, gcia, security+, CCNA, intrusion detection, malware, red team, blue team, cyber security, cybersecurity, cyber, security operations, Darknet monitoring, IOC collection, security consulting, strategic intelligence, Risk mitigation, penetration testing, trend analysis, data encryption, TS/SCI, Polygraph, SOC, SIGINT, DoD, MD, Maryland, Sec+, CySA+, CEH, malware, MISP, Forescout, threat intelligence, network security, threat detection, IOC, indicator of compromise, top secret, CI polygraph, trend analysis, APT, advanced persistent threat, deep web, information assurance, cyber, cyber security, cybersecurity, adversary, analysis, reporting, briefing, SCI, SCIF, On site, hybrid, OPSEC, Intelligence, intel, intelligence reporting, OSINT, open source, open-source, DHS, federal, government, contract, analysis, threat, cyber threat, threat intelligence, SIEM, splunk, wireshark, PCAP, malware, pen test, penetration testing, TTP, TTPs