The SOC Manager is an experienced cybersecurity operations leader with a strong technical background in network-security monitoring, incident detection, investigation, response, and threat analysis. This position manages SOC personnel and daily operations while coordinating closely with ISSOs, incident-response teams, system owners, and infrastructure teams.
Compensation & BenefitsPay commensurate with experience.
Full-time benefits include Medical, Dental, Vision, 401K, and other possible benefits as provided. Benefits are subject to change with or without notice.
SOC Manager Responsibilities Include:Manage a Security Operations Center or lead enterprise cybersecurity operations.
Supervise SOC analysts, incident responders, threat hunters, and security engineers.
Lead security monitoring, alert triage, escalation, investigation, containment, and incident reporting.
Develop SOC procedures, playbooks, escalation paths, metrics, and operational reports.
Monitor indicators of compromise and coordinate incident response across technical teams.
Perform network traffic analysis, intrusion analysis, log analysis, and threat detection.
Work with SIEM, endpoint detection and response, network detection, IDS/IPS, and threat-intelligence platforms.
Coordinate vulnerability and incident data with ISSOs for risk assessments, POA&Ms, SSP updates, and continuous monitoring.
Brief leadership on active threats, incidents, operational risks, and remediation status.
Support 24x7 operational continuity, shift coverage, and incident escalation as required.
Perform other job-related duties as assigned.
Bachelor’s degree in cybersecurity, information technology, computer science, engineering, or a related field.
Minimum of 8 years of relevant cybersecurity experience.
CISSP, GCIA, or equivalent advanced cybersecurity or intrusion-analysis certification.
Active Top Secret (TS) security clearance is required. Candidates must possess the required clearance to be considered for this position.
U.S. citizenship required.
Must be available during required Department of State core hours and for mission-critical incidents.
Federal SOC or Department of State cybersecurity experience preferred.
Experience with Splunk, Microsoft Sentinel, Elastic, QRadar, or comparable SIEM platforms preferred.
Experience with EDR, IDS/IPS, packet analysis, malware analysis, threat hunting, and digital forensics preferred.
Familiarity with NIST incident-response guidance, MITRE ATT&CK, CISA reporting requirements, and federal continuous monitoring preferred.
Experience coordinating with ISSOs, Security Control Assessors, system owners, cloud teams, and vulnerability-management teams preferred.
Equivalent certifications may include GCIH, GCED, GMON, GCFA, GSLC, CASP+/SecurityX, or other advanced incident-response, intrusion-analysis, or security-operations certifications, subject to customer approval.
Must pass pre-employment qualifications of Cherokee Federal.
Company Information
Criterion is part of Cherokee Federal — the division of tribally owned federal contracting companies owned by Cherokee Nation Businesses. As a trusted partner supporting federal customers, Cherokee Federal companies are focused on solving complex challenges and serving the government’s mission
#CherokeeFederal #LI-SM2 #AppC
Similar Searchable Job Titles:
SOC Manager
Security Operations Manager
Cybersecurity Operations Manager
Incident Response Manager
Cyber Defense Operations Lead
Keywords:
SOC Manager, Security Operations, Network Security Monitoring
Incident Response, Threat Hunting, Intrusion Analysis
SIEM, Splunk, Sentinel, IDS/IPS, EDR
MITRE ATT&CK, Packet Analysis, Indicators of Compromise
CISSP, GCIA, GCIH, Top Secret (TS) Clearance
Pipeline Position Notice:
This is a pipeline position intended to identify qualified candidates for anticipated future opportunities. This posting does not represent a current vacancy. Candidates who meet the qualifications may be contacted as positions become available and program requirements are finalized.
Legal Disclaimer: All qualified applicants will receive consideration for employment without regard to protected veteran status, disability or any other status protected under applicable federal, state or local law. Many of our job openings require access to government buildings or military installations.
Skills Required
- Bachelor’s degree in cybersecurity, information technology, computer science, engineering, or a related field
- Minimum of 8 years of relevant cybersecurity experience
- CISSP, GCIA, or equivalent advanced cybersecurity or intrusion-analysis certification
- Active Top Secret security clearance
- U.S. citizenship
- Availability during Department of State core hours and mission-critical incidents
- Experience with Splunk, Microsoft Sentinel, Elastic, QRadar, or comparable SIEM platforms
- Experience with EDR, IDS/IPS, packet analysis, malware analysis, threat hunting, and digital forensics
- Familiarity with NIST incident-response guidance, MITRE ATT&CK, CISA reporting requirements, and federal continuous monitoring
- Experience coordinating with ISSOs, Security Control Assessors, system owners, cloud teams, and vulnerability-management teams
- Federal SOC or Department of State cybersecurity experience
- Equivalent certifications such as GCIH, GCED, GMON, GCFA, GSLC, CASP+/SecurityX, or other advanced cybersecurity certifications, subject to customer approval
- Must pass pre-employment qualifications of Cherokee Federal
What We Do
Cherokee Federal is a top federal contractor that empowers mission success for over 60 U.S. federal agencies by delivering innovative solutions in defense, technology, health, and intelligence, focusing on solving complex challenges and serving national missions.
