SOC Operations Lead — 24/7 Federal Security (Remote)

Harmonia Holdings Group, LLC; Washington (District of Columbia); Hybrid; USD 150,000 - 190,000; Full time

Benefits offered by this job

Medical insurance

Dental and vision insurance

401(k) matching

Flexible schedules / teleworking

Paid holidays and PTO

Job summary

Revolutional in Washington, DC is seeking an experienced SOC Operations Manager to lead Tier 2 Threat Watch and act as the senior authority for event validation and incident assessment. You will oversee analysts, validate events, assess impact, and coordinate with federal partners to maintain a secure enterprise environment.

The role requires hands-on SIEM and IDS/IPS expertise, Python scripting for automation, and a strong grasp of NIST/FISMA frameworks.

Qualifications

• Bachelor's degree in CS, information security, or related field (or equivalent experience).
• 5+ years in security operations, including Tier 2 or senior SOC experience.
• Experience supervising SOC analysts or watch floor operations.
• Active Secret clearance required.

Responsibilities

• Lead Tier 2 Threat Watch Officer function and oversee event triage.
• Validate security events and determine response actions.
• Correlate anomalies across IDS, IPS, and SIEM to identify threats.
• Recommend network config changes to close detection gaps.
• Author and maintain intrusion detection signatures.
• Coordinate with law enforcement and interagency partners on significant events.

Skills

Tier 2 Threat Watch

Event validation

IDS/IPS/SIEM analysis

Threat intelligence

Incident response

Leadership / supervision

Interagency coordination

Python scripting

Education

Bachelor's degree in Computer Science / Information Security / related field

Tools

SIEM platforms

IDS/IPS platforms

Python scripting

Job description

Revolutional in Washington, DC is seeking an experienced SOC Operations Manager to lead Tier 2 Threat Watch and act as the senior authority for event validation and incident assessment. You will oversee analysts, validate events, assess impact, and coordinate with federal partners to maintain a secure enterprise environment.

The role requires hands-on SIEM and IDS/IPS expertise, Python scripting for automation, and a strong grasp of NIST/FISMA frameworks.