Security Operations Center Lead – Senior Manager

10+ years of experience leading security operation centers for large US government clients in a matrixed organization
5+ years of experience with network security monitoring, analysis, and engineering
3+ years of experience with network and host-based IDS and IPS
Experience with Splunk Enterprise Security and Phantom
Experience with programming languages, including Python, and IDS and SIEM rule development
Experience with SIEM technologies and SOAR solutions
Knowledge of Anti-Malware or EDR technologies and information security principles
Top Secret clearance
Bachelor’s degree in Computer Science, Information System or Information Security and 10+ years of experience with IT in a professional work environment or 12+ years of experience with IT in a professional work environment in lieu of a degree

Lead a team of analysts in network forensics, threat intelligence, and incident response to execute a 24x7x365 security monitoring program and support center
Work closely with government clients, customer site leadership, and other functional areas within the organization to ensure delivery of exceptional SOC services
Analyze and improve new and existing standard operating procedures and policies to achieve efficiency and maximize effectiveness
Foster an open environment and motivate workforce to develop creative solutions to identify and detect sophisticated adversarial attack methods within the enterprise security information and event management (SIEM) and other security tools
Provide solutions to train and certify analyst to meet DoD approved 8570 baseline certification requirements