Cyber SOC Manager

Join a culture of empowerment and connectivity.

Learn the skills you need to accelerate your career.

Discover benefits that support your life and work.

Build mission-ready tech that protects the nation.

As the Cyber Security Operations Center ( SOC ) Manager, you will lead the organization’s incident response operations, ensuring all activities are efficient and aligned with policy and mission objectives. This role facilitates communication and collaboration across teams and stakeholders during security incidents, develops and maintains comprehensive incident response plans and playbooks, and conducts thorough post-incident reviews to identify root causes and recommend remediation strategies.

The manager provides clear direction under pressure, maintains executive-level communication, and drives continuous improvement in the organization’s security posture.

What You’ll Work On:

• Lead and oversee the organization’s incident response operations, ensuring all activities are executed efficiently and in accordance with established policies and mission objectives.
• Coordinate response efforts across cross-functional teams and stakeholders to facilitate effective communication and collaboration during security incidents.
• Develop, implement, and maintain comprehensive incident response plans and playbooks, continuously improving processes based on lessons learned and industry best practices.
• Conduct thorough post-incident reviews to identify root causes, recommend remediation strategies, and drive continuous improvement in security posture.
• Provide clear direction and guidance to team members during high-pressure situations, maintaining executive-level communication and documentation throughout the incident lifecycle.

Join us. The world can’t wait.

You Have:

• Experience with security operations, incident response, threat analysis, and cybersecurity tools such as EDR, SIEM, IDS / IPS, and Log Analysis, for both on-premises and cloud-based environments
• Experience applying incident response met hodologies in operational environments
• Experience with leadership, including leading teams, managing projects, and providing technical guidance
• Ability to articulate technical concepts clearly
• Ability to make effective decisions in high-pressure situations
• Bachelor’s degree in Cybersecurity, IT, or CS and 12+ years of experience with cybersecurity, supervising multiple enterprise SOC teams and monitoring multiple unclassified and classified networks spanning multiple geographically disbursed locations, or Master’s degree in Cybersecurity or Information Security and 10+ years of experience with cybersecurity, supervising multiple enterprise SOC teams and monitoring multiple unclassified and classified networks spanning multiple geographically disbursed locations
• CISSP, Certified Information Security Manager ( CISM ) , GIAC Certified Incident Handler ( GCIH ) , or Certified SOC Analyst ( CSA ) Certification

Nice If You Have:

• Experience coordinating complex incidents involving multiple business units or locations
• Knowledge of post-incident analysis techniques and root-cause remediation planning
• Knowledge of cybersecurity principles, SOC operations, and incident response techniques
• Ability to develop and implement strategic initiatives that enhance SOC operations
• Possession of strong verbal and written communication skills
• TS/SCI clearance

Clearance:

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information;
Top Secret clearance is required.

Compensation

At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health,…