Job description

SOC Manager The SOC Manager is an experienced cybersecurity operations leader with a strong technical background in network-security monitoring, incident detection, investigation, response, and threat analysis. This position manages SOC personnel and daily operations while coordinating closely with ISSOs, incident-response teams, system owners, and infrastructure teams. Compensation & Benefits Pay commensurate with experience. Full-time benefits include Medical, Dental, Vision, 401K, and other possible benefits as provided. Benefits are subject to change with or without notice. SOC Manager Responsibilities Include: • Manage a Security Operations Center or lead enterprise cybersecurity operations. • Supervise SOC analysts, incident responders, threat hunters, and security engineers. • Lead security monitoring, alert triage, escalation, investigation, containment, and incident reporting. • Develop SOC procedures, playbooks, escalation paths, metrics, and operational reports. • Monitor indicators of compromise and coordinate incident response across technical teams. • Perform network traffic analysis, intrusion analysis, log analysis, and threat detection. • Work with SIEM, endpoint detection and response, network detection, IDS/IPS, and threat-intelligence platforms. • Coordinate vulnerability and incident data with ISSOs for risk assessments, POA&Ms, SSP updates, and continuous monitoring. • Brief leadership on active threats, incidents, operational risks, and remediation status. • Support 24x7 operational continuity, shift coverage, and incident escalation as required. • Perform other job-related duties as assigned. SOC Manager Experience, Education, Skills, Abilities Requested: • Bachelor’s degree in cybersecurity, information technology, computer science, engineering, or a related field. • Minimum of 8 years of relevant cybersecurity experience. • CISSP, GCIA, or equivalent advanced cybersecurity or intrusion-analysis certification. • Active Top Secret (TS) security clearance is required. Candidates must possess the required clearance to be considered for this position. • U.S. citizenship required. • Must be available during required Department of State core hours and for mission-critical incidents. • Federal SOC or Department of State cybersecurity experience preferred. • Experience with Splunk, Microsoft Sentinel, Elastic, QRadar, or comparable SIEM platforms preferred. • Experience with EDR, IDS/IPS, packet analysis, malware analysis, threat hunting, and digital forensics preferred. • Familiarity with NIST incident-response guidance, MITRE ATT&CK, CISA reporting requirements, and federal continuous monitoring preferred. • Experience coordinating with ISSOs, Security Control Assessors, system owners, cloud teams, and vulnerability-management teams preferred. • Equivalent certifications may include GCIH, GCED, GMON, GCFA, GSLC, CASP+/SecurityX, or other advanced incident-response, intrusion-analysis, or security-operations certifications, subject to customer approval. • Must pass pre-employment qualifications of Cherokee Federal. Company Information Criterion is part of Cherokee Federal — the division of tribally owned federal contracting companies owned by Cherokee Nation Businesses. As a trusted partner supporting federal customers, Cherokee Federal companies are focused on solving complex challenges and serving the government’s mission #CherokeeFederal #LI-SM2 #AppC Similar Searchable Job Titles: • SOC Manager • Security Operations Manager • Cybersecurity Operations Manager • Incident Response Manager • Cyber Defense Operations Lead Keywords: • SOC Manager, Security Operations, Network Security Monitoring • Incident Response, Threat Hunting, Intrusion Analysis • SIEM, Splunk, Sentinel, IDS/IPS, EDR • MITRE ATT&CK, Packet Analysis, Indicators of Compromise • CISSP, GCIA, GCIH, Top Secret (TS) Clearance Pipeline Position Notice: This is a pipeline position intended to identify qualified candidates for anticipated future opportunities. This posting does not represent a current vacancy. Candidates who meet the qualifications may be contacted as positions become available and program requirements are finalized. Legal Disclaimer: All qualified applicants will receive consideration for employment without regard to protected veteran status, disability or any other status protected under applicable federal, state or local law. Many of our job openings require access to government buildings or military installations. The SOC Manager is an experienced cybersecurity operations leader with a strong technical background in network-security monitoring, incident detection, investigation, response, and threat analysis. This position manages SOC personnel and daily operations while coordinating closely with ISSOs, incident-response teams, system owners, and infrastructure teams.

Requirements

Must-haves

Manage a Security Operations Center or lead enterprise cybersecurity operations.
Supervise SOC analysts, incident responders, threat hunters, and security engineers.
Lead security monitoring, alert triage, escalation, investigation, containment, and incident reporting.
Develop SOC procedures, playbooks, escalation paths, metrics, and operational reports.
Monitor indicators of compromise and coordinate incident response across technical teams.
Perform network traffic analysis, intrusion analysis, log analysis, and threat detection.
Work with SIEM, endpoint detection and response, network detection, IDS/IPS, and threat-intelligence platforms.
Coordinate vulnerability and incident data with ISSOs for risk assessments, POA&Ms, SSP updates, and continuous monitoring.
Brief leadership on active threats, incidents, operational risks, and remediation status.
Support 24x7 operational continuity, shift coverage, and incident escalation as required.
Perform other job-related duties as assigned.
SOC Manager Experience, Education, Skills, Abilities Requested:
Bachelor’s degree in cybersecurity, information technology, computer science, engineering, or a related field.
Minimum of 8 years of relevant cybersecurity experience.
CISSP, GCIA, or equivalent advanced cybersecurity or intrusion-analysis certification.
Active Top Secret (TS) security clearance is required. Candidates must possess the required clearance to be considered for this position.
U.S. citizenship required.
Must be available during required Department of State core hours and for mission-critical incidents.
Equivalent certifications may include GCIH, GCED, GMON, GCFA, GSLC, CASP+/SecurityX, or other advanced incident-response, intrusion-analysis, or security-operations certifications, subject to customer approval.

Nice-to-haves

Federal SOC or Department of State cybersecurity experience preferred.
Experience with Splunk, Microsoft Sentinel, Elastic, QRadar, or comparable SIEM platforms preferred.
Experience with EDR, IDS/IPS, packet analysis, malware analysis, threat hunting, and digital forensics preferred.
Familiarity with NIST incident-response guidance, MITRE ATT&CK, CISA reporting requirements, and federal continuous monitoring preferred.
Experience coordinating with ISSOs, Security Control Assessors, system owners, cloud teams, and vulnerability-management teams preferred.

Application prep

Use the role’s language and application details while tailoring your materials.

Platform: oracle-cloud
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision

401k