USAF SOC Lead
Core
Lead a Security Operations Center (SOC) for the US Air Force, managing defensive cybersecurity operations, incident response, and threat hunting across IT and OT environments.
Role type
Senior IC SOC Lead (Defensive Cybersecurity)
Builds
Centralized defensive operations, incident response capabilities, and security monitoring for DC3 IT and OT environments.
Domain
Defense / Cybersecurity
Required skills
SOC leadership, alert triage, threat hunting, incident response, operational risk management, network security, endpoint detection, vulnerability management, evidence handling, secure configurations, compliance reporting, command-and-control coordination.
Preferred skills
None explicitly stated.
Technologies
Cloud, Security, DevOps, Endpoint Detection, Vulnerability Tools, Command and Control Nodes, Enterprise Scanning.
Responsibilities
Lead SOC analysts and response personnel; prioritize work and coach staff; plan staffing, coverage, and on-call rotations; coordinate centralized defensive operations including monitoring and threat hunting; oversee alert triage and security-event analysis; direct incident detection, investigation, and mitigation; review investigation evidence and reports; coordinate weekly vulnerability assessments and track remediation; maintain command-and-control coordination with higher headquarters; manage cyber orders and taskers; maintain incident response procedures and operational documentation; coordinate with ISSOs and ISSM for RMF and enterprise risk activities.
Seniority
Senior, hands-on IC with leadership responsibilities.
