Security Operations Center (SOC) Lead

This position requires an active Public Trust clearance or the ability to obtain a Public Trust clearance to be considered.

The Security Operations Center (SOC) Lead is responsible for overseeing and managing the SOC team, ensuring 24x7x365 monitoring, detection, and response to security events across enterprise networks. This role leads incident response, vulnerability management, policy compliance, risk assessment, and system performance tuning, while providing guidance, training, and support to SOC personnel. The SOC Lead serves as a key technical and strategic point of contact for internal and external stakeholders to maintain secure, resilient, and compliant network operations.

Compensation & Benefits:

Estimated Starting Salary Range for Security Operations Center (SOC) Lead: Pay commensurate with experience.

Full time benefits include Medical, Dental, Vision, 401K, and other possible benefits as provided. Benefits are subject to change with or without notice.

Security Operations Center (SOC) Lead Responsibilities Include:

• Responsible for monitoring the network within the firewall (LAN)

• Responsible for monitoring the network beyond the firewall (WAN)

• Monitoring and Detection: Monitor the organization's networks and systems for security breaches and suspicious activity using Security Information and Event Management (SIEM) tools.

• Vulnerability Management: Conduct regular vulnerability assessments and penetration tests to identify potential weaknesses in computer systems and applications.

• Incident Response: Respond promptly to security incidents and breaches, investigate their root cause, contain the damage, and coordinate remediation efforts.

• Policy and Compliance: Develop, implement, and maintain security policies, standards, and procedures to ensure compliance with relevant industry standards and regulations (e.g., NIST, Established Playbooks, ISO 27001).

• Security Measures: Install, configure, and maintain security software and tools, such as firewalls, data encryption programs, and antivirus systems.

• Risk Assessment: Perform risk analyses of systems and applications to determine security requirements and recommend enhancements to management and senior IT staff.

• Training and Awareness: Provide security awareness training and guidance to employees on best practices and new security procedures.

• Documentation and Reporting: Prepare detailed reports of security assessments, incidents, and general security metrics for technical and non-technical audiences.

• This position may require shift work based on 24x7x365 operations.

• Supervises the activities and personnel associated with providing technical services to customers by identifying, prioritizing, and confirming resolution of reported problems with IT systems and services.

• Ensure that all phases of support, including installations, upgrades, software, hardware, operating systems, and operating system configuration issues, are properly coordinated, monitored, tracked, and resolved.

• Create and manage escalation procedures and ensures service levels are maintained.

• Document, track, and monitor problems to ensure resolution in a timely manner.

• Responsible for providing reports on vulnerabilities which have been identified to the SOC for remediation.

• Develop information technology projects and provides strategic management and objectives for the SOC team.

• Develop and inform evaluations of SOC personnel to ensure the efficient operation of SOC functions.

• Assess need for any system reconfigurations (minor or significant) based on request and maintenance trends, and make recommendations.

• Oversee development and dissemination of help sheets, usage guides, and FAQ lists for end users.

• Oversee the development, implementation, and administration of SOC staff training procedures and policies.

• Support the current reporting of enterprise metrics for network and cybersecurity operations.

• Maintain enterprise customer point of contact information.

• Provide initial remote troubleshooting, analysis, and triage of reported events.

• Act as both an external and internal-facing point of contact to facilitate handling of problem reports and escalate technical issues and communicate network status

• Support software and hardware issues and ensure stable system performance.

• Execute engineering tasks in support of system performance tuning on workstations, applications or network infrastructure in support Linux, Unix, Microsoft Windows operation systems services, observe industry best practices, standards, and procedures.

• Support maintenance and monitoring of the system/server infrastructure to include patching, system upgrade, backup, and configuration.

• Conduct problem management process (root cause analysis) attempt to determine the real or underlying cause of an incident in order to prevent future recurrences. Also support forensic analysis, triage and break fix of system server/server related trouble tickets.

• Tracking and documenting daily work tasks and issues

• Performs other job-related duties as assigned

Security Operations Center (SOC) Lead Experience, Education, Skills, Abilities requested:

• US Citizenship

• Bachelor's Degree in Computer Science, Information Technology or related engineering discipline or equivalent work experience in a related field.

• Strong problem solving and root cause analysis skills

• Minimum of 2-3 years' experience supporting or supervising security operations center / service desk / call centers

• Customer service focus, and strong interface/communication skills

• Ability to ask relevant questions of customers and engineers in support of problem resolution.

• Ability to work independently with little supervision.

• Ability to follow procedures and work instructions to perform tasks

• Identify process gaps and proactively improve system inefficiencies

• Excellent written and verbal communication skills.

• Ability to support shift work

• Must pass pre-employment qualifications of Cherokee Federal

Company Information:

Criterion is a part of Cherokee Federal - the division of tribally owned federal contracting companies owned by Cherokee Nation Businesses. As a trusted partner for more than 60 federal clients, Cherokee Federal LLCs are focused on building a brighter future, solving complex challenges, and serving the government's mission with compassion and heart. To learn more about Criterion, visit cherokee-federal.com.

#CherokeeFederal #LI-REMOTE
#APPDirect

Cherokee Federal is a military friendly employer. Veterans and active military transitioning to civilian status are encouraged

Legal Disclaimer: All qualified applicants will receive consideration for employment without regard to protected veteran status, disability or any other status protected under applicable federal, state or local law. Many of our job openings require access to government buildings or military installations. Candidates must pass pre-employment qualifications of Cherokee Federal.

Please Note: This position is pending a contract award. If you are interested in a future with Cherokee Federal, APPLY TODAY! Although this is not an approved position, we are accepting applications for this future and anticipated need.