Description
Job Description:
Leidos is a Fortune 500™ company aimed at embracing and solving some of the world’s most pressing challenges. Through science and technology, Leidos makes the world safer, healthier and more efficient. Our Civil Group offers an array of exciting career opportunities for the best IT, energy, logistics and engineering professionals.
Leidos is seeking a Security Operations Center (SOC) Lead with senior technical leadership and coordination to an enterprise Security Operations Center (SOC) working in a 24x7 operational environment on a mission-critical enterprise information technology contract. The candidate will be a lead, partnered with other technical leaders in other domain skillsets, including: cloud engineering, infrastructure, enterprise operations, and service desk operations. The SOC Lead requires daily interaction with management, security personnel at customer sites, and government personnel with other federal agencies. Applicant must be a positive, flexible, self-starter requiring minimal direct supervision, and able to excel as a leader in the fast-paced cybersecurity industry. Exceptional management, communication and interpersonal skills are a necessity; including the ability to effectively communicate via written and verbal media. The SOC Manager is responsible for providing technical oversite and managing the scheduling of SOC activities and advancing the state of analysis with techniques and tools. This position will assist with building the team, including development, training and mentoring; establishing standards for high quality of deliverables and outputs; tuning and creating processes and procedures for the SOC; and creating a sense of ownership and dedication to mission.
Responsible for the following tasks:
Establish the operational rhythm and standards for the SOC
Coordinate the scheduling of the 24 x 7 analysts and CIRT teams
Lead or assign leadership for projects advancing the state of analytic techniques and tools
Validate continual improvement and technical advances
Maintain a forward-leaning ops tempo that includes continual validation and improvement across all SOC functions.
Maintain situational awareness of escalated events and alerts, tools status, vulnerability status, forensics and malware investigations, intelligence status, and all other SOC functions
Experience reporting on SOC activities and deliver SOC recommendations in accordance with government and contractual requirements Provide customers with remediation recommendations
Serve as a Subject Matter Expert (SME) within the team for technical expertise
Develop program of training and coaching sessions for SOC personnel on analytic techniques and tools
Create, review, and approve new procedural documentation
Work is performed at the government location in downtown Washington, DC. Team is geographically dispersed, but mainly at the Washington, DC location with the customer. Position may include up to 10% travel both locally and nationwide.
Basic Qualifications:
Technical understanding of core cybersecurity technologies as well as emerging capabilities
Hands-on cybersecurity experience (Protect, Detect, Respond and Sustain) within a Computer Incident Response Team (CIRT) and/or prior experience performing large-scale incident response.
Demonstrated understanding of the life cycle of cybersecurity threats, attacks, attack vectors and methods of exploitation with an understanding of intrusion set tactics, techniques and procedures (TTPs).
Familiarity or experience in Intelligence Driven Defense, Cyber Kill Chain methodology, and/or MITRE ATT&CK framework.
Familiarity with Cloud concepts and experience performing monitoring and responding to threats in Cloud environments.
Excellent written and verbal communication skills
The candidate shall have demonstrated capabilities to analyze highly complex technical issues, recommend plans of action for staff (including both contractor and government personnel), and manage teams supporting resolution of these issues.
Must be US Citizen.
Active Top Secret – Sensitive Compartmented Information (TS/SCI) Eligible
Bachelor's degree (or equivalent) and 5-10 years of prior relevant experience. G
5+ years of experience supervising or leading teams or projects.
Preferred Qualifications:
- Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Security+, Certified Ethical Hacker (CEH), GIAC Security Essentials Certification (GSEC), Systems Security Certified Practitioner (SSCP)
Pay Range:
COVID Response
Effective October 1, in order to enter Leidos facilities in the US and to attend Leidos business events outside our facilities, employees will be required to be vaccinated for COVID-19 or maintain proof of a negative COVID-19 test within 96 hours of entry. Effective January 18, 2022, all Leidos employees must be fully vaccinated (2 weeks past final dose) unless they are entitled to a legal accommodation. If you are not vaccinated, please consider getting your COVID-19 vaccination as soon as possible. If you have any questions, please contact your Talent Acquisition POC.
About Leidos
Leidos is a Fortune 500® information technology, engineering, and science solutions and services leader working to solve the world’s toughest challenges in the defense, intelligence, civil, and health markets. The company’s 43,000 employees support vital missions for government and commercial customers. Headquartered in Reston, Virginia, Leidos reported annual revenues of approximately $12.30 billion for the fiscal year ended January 1, 2021. For more information, visit www.Leidos.com.
Pay and Benefits
Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available here.
Securing Your Data
Leidos will never ask you to provide payment-related information at any part of the employment application process. And Leidos will communicate with you only through emails that are sent from a Leidos.com email address. If you receive an email purporting to be from Leidos that asks for payment-related information or any other personal information, please report the email to [email protected].
Commitment to Diversity
All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.
