Tyto Athene is searching for an experienced SOC Manager to lead and manage SOC activities including monitoring and incident response to support our customer in Arlington, Virginia. The SOC Manager will assist the client's leadership in planning related to the SOC as they deploy capabilities across multiple networks and integrate with the existing Enterprise SOC. The SOC manager will oversee cybersecurity monitoring and incident response to protect networks, systems, and data from cyber threats. The ideal candidate will have a strong technical background in cybersecurity operations, and extensive leadership experience in managing or leading SOC teams.
Responsibilities:
- Be a change agent and thought leader, optimizing security operations within the SOC in support of the client, meeting all key performance indicators.
- Lead, mentor, and manage a team of SOC analysts, cyber incident responders, cyber threat hunters, and cyber threat intelligence specialists ensuring operational efficiency, team performance, and adherence to service level agreements (SLAs).
- Take ownership of the SOC SOP and playbook life cycle, being responsible for creating and updating SOC SOPs and playbooks for monitoring and incident response.
- Review and provide recommendations on client security policies such as the Incident Response Plan (IRP) as well as security policies affecting the client such as EO 14028 and OMB M-21-31.
- Mentor shift leads and analysts on detection analysis, incident response techniques, and security best practices.
- In a security incident, lead the client's incident response.
- Track performance and provide recommendations on improving SOC metrics.
- Oversee the SOC's 24x7x365 operations to include shift schedules and minimum manning requirements.
- Provide regular reporting and ad-hoc and formal briefings to senior management on performance metrics and incident resolution.
Required:
- Bachelor's degree in Computer Science, Information Technology, or related field
- 10 years of relevant experience
- Thorough understanding of cybersecurity operations workflows
- Excellent technical, analytical, and organizational skills
- Strong customer service skills
- Strong writing skills
- Experience with securing various environments
- Experience working with and across multiple teams
- Experience with CSSP Evaluator Scoring Metrics (ESM) and audits
Certifications: DoD 8570 IAM/IAT Level II certification. This will change to a DoD 8140 equivalent once a DISA 8140 policy is released.
Clearance: Active TS/SCI clearance
Location: This is an on-site role with expectations of being on the client site in Arlington, VA five days a week.