4217 Microsoft SOC Chief

Security Operations Center (SOC) Chief

We have an opening for a Security Operations Center (SOC) Chief. This role will lead SOC operations and incident response activities, ensuring 24/7/365 monitoring of all the federal client's security channels. General Duties: Lead SOC operations and incident response activities including SOC management and IR commander role Oversee 24/7/365 monitoring of all FCC security channels (GSA's MTIPS, TIC, and PEP systems) Conduct Information Security GAP Analysis reviews Direct cybersecurity operations and incident response teams Coordinate with Department of Commerce Enterprise SOC Ensure compliance with NIST 800-61 guidelines and FCC reporting standards Manage incident response processes and procedures Lead insider threat hunting and vulnerability assessment activities Oversee cyber threat intelligence operations Coordinate incident assessment and response support activities Investigate alerts and triage incidents, analyze root causes, and respond to minimize damage Author custom detection content, tune SIEM and IDS/IPS events, and maintain SIEM content Maintain a Cyber Defense Playbook and SOC Communication Plan Required Qualifications: Bachelor's degree in Cybersecurity, Information Technology, or related field 7+ years of experience in SOC operations and incident response, including SOC management and IR commander role Core competencies in leading Information Security GAP Analysis review, cybersecurity operations, and incident response Knowledge, skills, tasks, and capabilities described in NICE Work Roles for Incident Response (PD-WRL-003), Insider Threat Analysis (PD-WRL-005), and Threat Analysis (PD-WRL-006) Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM) GIAC Incident Response Certification or GIAC Security Operations Manager (GSOM) Microsoft Certified Security Operations Analyst Associate Clearance: Secret clearance with eligibility for Top Secret