NOC / SOC Shift Lead (2nd Shift
The Defense Sector at Leidos is currently looking to add a NOC / SOC Shift Lead (2nd Shift). The NOC / SOC Shift Lead (2nd Shift) will serve as the senior technical authority and shift supervisor for after-hours network operations and cybersecurity monitoring, blending NOC and SOC functions across DoD networks. This role independently prioritizes and leads response to significant incidents, coaches junior technicians, and owns the shift-turnover process to ensure continuity with day-shift teams and leadership.
This position requires daily on-site work at Langley, AFB. The core hours for this position are considered 4:00 PM to 12:00 AM.
Roles and Responsibilities:- Shift Leadership & Coverage: Serve as the senior point of contact for the 2nd shift NOC/SOC team, assigning and prioritizing incoming alerts and ensuring adequate coverage across the shift.
- Continuous Monitoring: Oversee SIEM and network performance dashboards to detect security threats and infrastructure outages.
- Incident Triage & Response: Lead the triage of real incidents versus false alarms, direct initial diagnostics, and contain active network or security anomalies.
- Escalation & Handoff: Own escalation of high-severity incidents to Tier 2/3 engineering teams or Incident Responders, and author/review the detailed shift-handover report for day-shift leadership.
- Maintenance & Troubleshooting: Oversee routing, connectivity issue resolution, backup restorations, and software patch management during off-peak hours.
- Mentorship & Quality Review: Coach and train junior NOC/SOC technicians, review technician-generated tickets and reports for accuracy, and reinforce shift procedures.
- Bachelor’s degree with 4+ years of experience or a Master’s degree with 2+ years of experience. Additional experience may be considered in lieu of a degree.
- Security Clearance: Active DoD TS/SCI clearance.
- DoD 8140/8570: IAT Level II baseline certification (e.g., CompTIA Security+ CE); a CSSP Analyst-aligned certification (e.g., CySA+, CEH, or GCIH) is strongly preferred given the role’s blended NOC/SOC scope.
- Experience: 4+ years of hands‑on experience in IT security, network operations, or a related field, including some prior experience leading or mentoring a shift team.
- Leadership: Demonstrated ability to prioritize competing incidents, make independent risk-based decisions with minimal oversight, and coordinate a small team during off-hours coverage.
- Technical
Skills:
Working proficiency with enterprise SIEM/EDR and monitoring tools (e.g., Splunk, Crowd Strike, Microsoft Sentinel, Solar Winds). - Shift Flexibility: Willingness to work evening and rotational shifts (e.g., 3:00 PM-11:00 PM), including weekends and holidays.
- Toolset Familiarity: Exposure to Security Onion, Juniper SSR, Cisco switching, Wireshark, Service Now, or Jira Service Manager.
- Advanced
Certifications:
CySA+, GCIA, or CEH. - Prior DoD/Military
Experience:
Previous shift-lead or team-lead experience in a DoD, military, or cleared NOC/SOC environment. - Process Improvement: Experience refining shift SOPs, playbooks, or escalation procedures based on operational trends.
Pay Range $87,100.00 - $
About LeidosLeidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit
Pay and BenefitsPay and benefits are fundamental to any career decision. That’s why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at
Securing Your DataBeware of fake employment opportunities using Leidos’ name. Leidos will never ask you to provide payment-related information during any part of the employment application process (i.e., ask you for money), nor will Leidos ever advance money as part of the…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).