SOC Manager, Cybersecurity
Core
Build and lead a Security Operations Center (SOC) for a defense/aerospace company handling CUI and export-controlled data, focusing on detection, incident response, and compliance.
Role type
Senior SOC Manager (Defense/Aerospace)
Builds
SOC operations, detection content, incident response capabilities, and compliance evidence for CMMC/NIST assessments.
Domain
Defense, Aerospace, Cybersecurity
Required skills
SOC leadership, incident response, threat hunting, SIEM/EDR/SOAR, Python/PowerShell scripting, CMMC Level 2, NIST SP 800-171, DFARS 252.204-7012, MSSP management, insider threat monitoring, data loss prevention.
Preferred skills
Building SOC from early stage, C3PAO/DIBCAC assessment support, counterintelligence experience, NISPOM familiarity, lab/embedded environment monitoring, GCIH/GCFA/GCIA/GCDA/GNFA/CISSP certifications, military/intelligence/DoD experience.
Technologies
SIEM, EDR, SOAR, Python, PowerShell, MITRE ATT&CK, CMMC, NIST SP 800-171, DFARS, NIST SP 800-61, DC3/DCISE, NSA Cybersecurity Collaboration Center.
Responsibilities
Define SOC operating model (coverage, on-call, escalation), hire and train analysts/engineers, write playbooks/runbooks, own SOC budget and tooling roadmap, manage MSSP/MDR relationships, own log source coverage and detection content, run proactive threat hunts, serve as incident commander, meet DFARS reporting obligations, operate data loss monitoring, produce evidence for CMMC/NIST assessments, report SOC performance metrics.
Seniority
Senior, hands-on IC with leadership responsibilities
