SOC Manager

K&A Technologies LLC; Washington (District of Columbia); On-site; USD 120,000 - 150,000; Full time

Job summary

K&A Technologies LLC located in Washington, D.C. is looking for a SOC Manager to oversee security operations, team performance, and incident escalation. The candidate will manage daily SOC tasks and ensure high-quality reporting while guiding a team of analysts through incident responses.

This role demands extensive cybersecurity knowledge, including SOC experience and leadership skills. The firm emphasizes hands-on federal expertise in delivering reliable and responsive support for government agencies in operational performance and cyber defense.

Qualifications

• 8+ years of cybersecurity experience.
• 3+ years leading SOC teams or cyber operations.
• Strong understanding of incident escalation and triage.

Responsibilities

• Manage day-to-day SOC operations and workload tracking.
• Lead analysts to ensure timely review and escalation of cybersecurity events.
• Provide timely operational reporting to stakeholders.

Skills

Cybersecurity experience

SOC operations

Incident response

Security monitoring

Strong communication skills

Leadership abilities

Education

GCIA, GCIH or relevant cybersecurity certification

Tools

SIEM

SOAR

ITSM

EDR

Network security

Threat intelligence platforms

Job description

K&A Technologies LLC is a small business specializing in cybersecurity and mission IT support for federal customers. With expertise in SOC operations, cyber defense, security monitoring, and incident response, we help government agencies strengthen their cyber defenses and improve operational performance. Our hands‑on federal experience and mission‑focused approach ensure high‑quality, reliable, and responsive support tailored to meet evolving cybersecurity needs. Committed to excellence, we strive to protect critical systems and drive process improvements in every engagement.

Position Overview

K&A Technologies LLC is seeking a SOC Manager to oversee security operations, team performance, incident escalation, reporting quality, and continuous improvement across a cybersecurity operations environment.

This role requires a strong SOC leadership background, practical technical knowledge, and the ability to guide analysts through security investigations while maintaining high standards for timeliness, accuracy, and communication.

Key Responsibilities

• Manage day-to-day SOC operations, including workload tracking, alert review, escalations, handoffs, and operational reporting.
• Lead analysts and shift personnel to ensure cybersecurity events are reviewed, documented, and escalated appropriately.
• Monitor ticket queues, open actions, aging items, and operational risks to help ensure timely response.
• Review incident reports, investigative summaries, root cause analysis, and leadership updates for accuracy, completeness, and clarity.
• Support response to high-priority alerts, escalated investigations, and coordinated security activity.
• Coordinate with technical teams and leadership to support incident handling, reporting, and follow-up actions.
• Ensure staff follow established procedures, escalation paths, documentation standards, and incident handling processes.
• Identify staffing gaps, recurring quality issues, training needs, process weaknesses, and improvement opportunities.
• Provide status updates, metrics, briefings, and recommendations to leadership and stakeholders.
• Support continuous improvement of SOC workflows, analyst readiness, reporting quality, and operational effectiveness.

Required Qualifications

• 8+ years of cybersecurity experience, including SOC operations, cyber defense, incident response, or security monitoring.
• 3+ years leading SOC teams, shift operations, incident response teams, or cyber operations personnel.
• Experience managing security operations, including staffing, escalation, handoffs, workload tracking, and performance expectations.
• Strong understanding of alert triage, incident escalation, containment coordination, root cause analysis, cyber reporting, and SOC procedures.
• Experience with enterprise security and workflow tools such as SIEM, SOAR, ITSM, EDR, network security, identity, email security, and threat intelligence platforms.
• Familiarity with NIST incident response guidance, MITRE ATT&CK, ITIL-based service management, and operational reporting.
• Strong written and verbal communication skills, including the ability to brief technical and non-technical stakeholders.
• Ability to manage competing priorities, make sound operational decisions, and lead teams during time-sensitive security events.

Required Certification

• GCIA, GCIH, or other relevant cybersecurity certification.