Title Security Operations Center LeadJob typeFull timeLocation(s)Washington DCWork Remotely: Temporarily due to COVID-19Purpose: Position with an Award-winning Government Technology Solutions provider Rated#4 in Systems Development by Inc 2018, looking to expand team for a large Government project to support the U.S. Department of State (DoS) in Washington DC.
Requirements:
The lead will be expected to provide expert technical knowledge to the analysts as well as take part in planning and handling day to day operations. The SOC lead will be accountable for the shift supervision, coordination, training, and oversight over assigned staff and daily activity.
Lead and manage Security Operations Center.
In-depth knowledge of security concepts such as cyber-attacks and techniques, threat vectors, risk management, incident management etc.
Experience in threat management.
Excellent communication and leadership skills. Good Analytical skills, Problem solving and Interpersonal skills.
Ensure incident identification, assessment, quantification, reporting, communication, mitigation and monitoring.
Ability to create repeatable processes, escalation instructions and work scripts as needed for shift agents.
Creation of reports, dashboards, metrics for SOC operations and presentation to Sr. Management.
Responsible for integration of standard and non-standard logs in SIEM.
Digital Forensics and Analytics including the ability to search across logs on different applications and systems in different time periods based on specific criteria.
Using Open Source Intelligence Threat (OSINT) monitoring and collecting information from public sources as well as interagency intelligence employing long-term storage of historical data to facilitate correlation of data over time and to provide the retention necessary for compliance requirements.
Support the implementation, configuration, and administration of the SIEM processes and tools.
Create queries, dashboards, and visualizations to support customer requirements and monitoring of the Splunk deployment.
Define protocols and maturing “playbooks” of operational response to cyber threats.
Minimum Qualifications
8+ years of demonstrated experience in Information Technology or a related field.
Splunk background preferred.
Must have a strong leadership background with the ability to bridge the gap between technical knowledge and supervisory responsibilities.
Alternatively please apply through our website at
Alternatively please apply through our website at www.skilled-hire.com/career to be considered for this position.