{"id":2587826,"url":"https://alion.io/job/cfocussoftware-aousc-soc-operations-lead-managed-detection-response-mdr-lead-cfocus-software-incorporated","title":"AOUSC - SOC Operations Lead / Managed Detection & Response (MDR) Lead - cFocus Software Incorporated","company":{"id":4419850,"name":"cFocus Software","domain":"cfocussoftware.com","url":"https://alion.io/company/cfocussoftware","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"JazzHR","truth_index":null},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Washington, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":120000,"max_usd":249000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":398},"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Crowdstrike","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"Sysmon","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-10-15T04:37:32Z","employer_posted_date":"2026-10-15","last_verified_at":"2026-10-21T12:29:36Z","board_verified":true,"closed_at":null,"days_open":6,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":6},"description":"Position Title\nSOC Operations Lead / Managed Detection & Response (MDR) Lead\nPosition Overview\nThe SOC Operations Lead will oversee 24x7x365 Security Operations Center (SOC) and Managed Detection & Response (MDR) operations supporting a large federal enterprise environment. The Lead will direct SOC analysts, incident responders, and MDR personnel responsible for security monitoring, alert triage, incident analysis, escalation, containment coordination, reporting, and continuous operational improvement.\nThe ideal candidate possesses deep experience leading enterprise SOC operations supporting federal agencies, including SIEM operations, endpoint detection and response (EDR), cloud security monitoring, incident coordination, and executive cyber reporting.\nKey Responsibilities\nLead enterprise SOC and MDR operations supporting on-premises and cloud environments. \nOversee 24x7 monitoring, detection, triage, and escalation activities. \nDirect operational workflows for: SIEM monitoring, \nalert management, \nincident coordination, \ncase management, \nand operational reporting. \n\nManage analyst teams supporting: Splunk, \nMicrosoft Sentinel, \nCrowdStrike, \nSysmon, \nWindows event logging, \nand cloud telemetry platforms. \n\nDevelop and maintain SOC SOPs, playbooks, runbooks, escalation matrices, and reporting procedures. \nLead operational metrics reporting including: MTTD, \nMTTR, \nfalse positive rates, \nautomation effectiveness, \nanalyst productivity, \nand incident impact assessments. \n\nCoordinate closely with Threat Hunting, CTI, Detection Engineering, and Incident Response teams. \nBrief executives and government leadership on significant incidents, operational trends, and emerging threats. \nSupport proposal development, oral presentations, staffing, and transition planning. \nRequired Qualifications10+ years of cybersecurity operations experience. \n5+ years leading enterprise SOC or MDR environments. \nExperience supporting federal civilian or DoD environments. \nExperience managing large-scale SOC operations in environments exceeding: 10,000+ users, \nenterprise cloud environments, \nand large SIEM deployments. \n\nExperience with: Splunk Enterprise Security, \nMicrosoft Sentinel, \nCrowdStrike, \nEDR/XDR platforms, \nSOAR technologies, \nand cloud security monitoring. \n\nDeep understanding of: MITRE ATT&CK, \nincident response, \ndetection engineering, \nand threat-informed defense. \n\nStrong executive briefing and oral presentation skills. \n Preferred CertificationsCISSP \nGCIA \nGCIH \nGMON \nGSOC \nSplunk Architect/Admin certifications \nMicrosoft Security certifications","description_format":"text","description_chars":2586,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":5,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Security Operations","Managed Security"],"lifecycle":[{"event":"open","at":"2026-10-15T04:37:32Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":6,"expected_fill_days":33,"reasons":["conf:0","velocity","win:early"],"computed_at":"2026-10-21T05:46:15Z"},"pay":null,"html_url":"https://alion.io/job/cfocussoftware-aousc-soc-operations-lead-managed-detection-response-mdr-lead-cfocus-software-incorporated","json_url":"https://alion.io/job/cfocussoftware-aousc-soc-operations-lead-managed-detection-response-mdr-lead-cfocus-software-incorporated.json","meta":{"generated_at":"2026-10-21T17:05:31Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":24078,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-22T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4419850},"rest":"https://alion.io/mcp/rest/get_company?id=4419850"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcfocussoftware-aousc-soc-operations-lead-managed-detection-response-mdr-lead-cfocus-software-incorporated"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcfocussoftware-aousc-soc-operations-lead-managed-detection-response-mdr-lead-cfocus-software-incorporated"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcfocussoftware-aousc-soc-operations-lead-managed-detection-response-mdr-lead-cfocus-software-incorporated"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/cfocussoftware-aousc-soc-operations-lead-managed-detection-response-mdr-lead-cfocus-software-incorporated\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcfocussoftware-aousc-soc-operations-lead-managed-detection-response-mdr-lead-cfocus-software-incorporated"}]}