SOC Operations Lead: Incident Response & SIEM Mastery

True Zero Technologies; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

True Zero Technologies is seeking a seasoned SOC leader to direct daily operations, manage staffing schedules, and ensure continuous security monitoring across the enterprise.

You will oversee Tier I-III security analysts, coordinate incident response with federal stakeholders, and align with NIST SP 800-61 while developing SOPs and incident response playbooks. The role emphasizes strong governance and proactive security posture.

Qualifications

• Experience leading large SOC operations and incident response teams.
• Knowledge of federal cybersecurity requirements and governance.

Responsibilities

• Direct daily SOC operations and manage staffing schedules.
• Oversee Tier I, II, and III security analysts.
• Ensure continuous security monitoring and operational readiness.
• Manage the full incident response lifecycle.
• Coordinate with cybersecurity teams, IT operations, and federal stakeholders.
• Oversee SIEM, SOAR, EDR, and CDM technologies.
• Maintain enterprise security visibility and prioritization of alerts.
• Align operations with NIST SP 800-61 and federal requirements.
• Develop SOPs, incident response playbooks, and CONOPS.

Skills

SOC operations

Incident response

Threat monitoring

Coordination with federal stakeholders

Tools

SIEM

SOAR

EDR

CDM

Job description

True Zero Technologies is seeking a seasoned SOC leader to direct daily operations, manage staffing schedules, and ensure continuous security monitoring across the enterprise.

You will oversee Tier I-III security analysts, coordinate incident response with federal stakeholders, and align with NIST SP 800-61 while developing SOPs and incident response playbooks. The role emphasizes strong governance and proactive security posture.