SOC Task Lead: Threat Detection & Response

Phase2 Technology; Huntsville (AL); Hybrid; USD 113,000 - 257,000; Full time

Job summary

Booz Allen Hamilton is seeking a SOC Task & Integration Lead to guide real-time threat response for federal networks. You will oversee detection, incident response, and threat intel, mentoring analysts and delivering actionable guidance to clients to harden networks.

The role requires 10+ years in IT/cybersecurity, 3+ years of leadership in SOC, and relevant certifications. A clearance is required. This position supports hybrid work and national facilities.

Qualifications

• 10+ years of experience in an IT or cybersecurity field
• 3+ years leading cybersecurity operations teams, including large analyst groups
• 3+ years developing enterprise SOC concepts of operations, policies, and procedures
• Knowledge of network operations, incident response, and enterprise level detection and monitoring
• Ability to create and refine organizational processes, documentation, and technical guidance
• Secret clearance
• HS diploma or GED
• Cybersecurity certifications such as CISSP, GCIH, GSOC, or GSOM

Responsibilities

• Oversee efforts to find advanced threats by leading teams that analyze logs, forensic data, and threat intelligence
• Advise clients on how to close gaps and harden networks
• Lead SOC operations, monitoring, detection and incident response activities
• Develop enterprise-wide SOC concepts of operations, policies and procedures

Skills

Team leadership

Incident response

Threat analysis

SOC concepts

Process documentation

Cybersecurity certifications

SIEM/UEBA

Education

HS diploma or GED

Bachelor's degree in Cybersecurity / IT

Tools

SIEM

SOAR

UEBA

Job description

Booz Allen Hamilton is seeking a SOC Task & Integration Lead to guide real-time threat response for federal networks. You will oversee detection, incident response, and threat intel, mentoring analysts and delivering actionable guidance to clients to harden networks.

The role requires 10+ years in IT/cybersecurity, 3+ years of leadership in SOC, and relevant certifications. A clearance is required. This position supports hybrid work and national facilities.