Security Operations Center; SOC Chief

Security Operations Center (SOC) Chief

This position leads the Security Operations Center for a federal enterprise cybersecurity program operating within government-controlled secure facilities. The SOC Chief is the senior operational authority for all SOC activities — overseeing cyber defense operations, serving as primary incident commander, and coordinating directly with government federal personnel on security events, program risk, and organizational security posture. The environment is high-pressure with rapidly changing priorities, and the SOC Chief is expected to operate effectively in both.

The core challenge: sustaining a high-performing SOC across continuous cyber defense and incident response operations — managing program delivery, leading Information Security GAP Analysis, and commanding incident response efforts — all within a classified, government-controlled environment where execution quality and stakeholder trust are non-negotiable.

As SOC Chief at Revolutional, you are the senior leader and operational authority for the Security Operations Center. You oversee all SOC activities, own program tracking and risk management, lead the Information Security GAP Analysis function, and serve as primary incident commander during active security events. You are the principal interface between the contractor SOC team and government federal personnel, and you carry both the technical credibility and organizational leadership to make that interface work under pressure.

You bring 7 to 10 years of experience spanning SOC management and incident response command — both are explicitly required, not interchangeable. You operate in full alignment with the NICE Cybersecurity Workforce Framework across the Cyber Defense Analyst (PR-CDA-001) and Cyber Defense Incident Responder (PR-CIR-001) work roles, and you ensure your team meets all applicable role-based training requirements.

• Oversee all SOC activities across cyber defense monitoring, alert triage, incident response, and threat analysis functions; serve as the senior operational and organizational authority for the SOC
• Maintain program tracking mechanisms including project schedules, risk registers, and issue logs; identify risks and issues early, develop mitigation strategies, and drive corrective actions to closure
• Ensure all SOC program deliverables are produced on time and to quality standards; hold the team accountable to contractual and program performance obligations
• Lead the Information Security GAP Analysis function; assess current security posture against applicable frameworks and standards, identify gaps, and communicate findings and remediation priorities to government stakeholders
• Serve as primary incident commander during active security events; direct incident response operations, make real-time decisions on containment and escalation, and ensure coordinated, effective response across all participating teams
• Coordinate directly with government federal personnel on SOC performance, security events, program risk, and organizational security matters; maintain a trusted, transparent stakeholder relationship
• Operate effectively in a high-pressure environment with changing priorities; resource and reprioritize SOC activities dynamically without losing operational continuity or delivery quality
• Ensure full SOC team compliance with NICE Cybersecurity Workforce Framework role definitions and role-based training requirements across PR-CDA-001 and PR-CIR-001 work roles
• Develop and maintain SOC operational standards, playbooks, and governance documentation; drive continuous improvement through after-action reviews and lessons learned
• Produce executive-level SOC status reports, incident summaries, risk assessments, and program health updates for government and program leadership

• Bachelor's degree in Computer Science, Information Security, or related field (or equivalent experience)
• 7 to 10 years of experience in cybersecurity with demonstrated, concurrent expertise in both SOC management and incident response command — both are required
• Proven experience as a primary incident commander…