Who you'll be:

We are seeking a dynamic and experienced leader to oversee our 24x7x365 Security Operations Center for a large federal cybersecurity program. This role is pivotal in managing a tiered analyst structure that incorporates human expertise with AI-driven detection and response capabilities. You will be responsible for key performance indicators in detection and response, developing SIEM/SOAR platform strategies, and providing threat intelligence briefings to leadership. As the SOC escalation authority, you will ensure continuous monitoring and lead staffing, training, and quality assurance for the SOC.

What you'll do:

• Own 24x7x365 Security Operations Center performance and serve as its escalation authority.
• Manage detection and response KPIs (MTTD/MTTR) and drive continuous improvement initiatives.
• Lead a tiered analyst structure, integrating human analysts with AI-driven capabilities.
• Deliver regular threat intelligence and SOC performance briefings to program and client leadership.
• Set and evolve SIEM/SOAR platform strategy and use-case development priorities.
• Lead SOC staffing, scheduling, training, and quality assurance programs.
• Coordinate incident response for significant security events and conduct post-incident reviews.
• Ensure SOC processes and playbooks remain current with evolving threats and technologies.
• Coordinate with threat intelligence, vulnerability management, and engineering functions to enhance detection coverage.

What you need:

• 10 years of cybersecurity experience, including at least 5 years in a SOC leadership role.
• Bachelor's degree in Computer Science, Cybersecurity, or related field (equivalent experience considered).
• Deep understanding of SIEM/SOAR platforms, incident response processes, and detection engineering.
• Proven experience leading and developing large technical teams in a 24x7 operational environment.

Required Certifications:

• CISSP, CISM, or GIAC Certified Intrusion Analyst (GCIA) required.
• GCIH preferred (if not already held).