{"id":2587858,"url":"https://alion.io/job/cfocussoftware-usaf-soc-lead-cfocus-software-incorporated","title":"USAF - SOC Lead - cFocus Software Incorporated","company":{"id":4419850,"name":"cFocus Software Incorporated","domain":"cfocussoftware.com","url":"https://alion.io/company/cfocussoftware","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"JazzHR","truth_index":null},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Linthicum Heights, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":124000,"max_usd":256000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":373},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[],"status":"live","first_seen_at":"2026-10-15T04:37:32Z","employer_posted_date":"2026-10-15","last_verified_at":"2026-10-15T04:37:32Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"cFocus Software seeks a SOC Lead to join our program supporting the United States Air Force (USAF). This position is on-site in Linthicum Heights, MD. This position requires an Active TS/SCI clearance.\nQualifications:\nActive TS/SCI clearance\nB.S. Computer Science, Information Technology, or a related field\nExperience leading SOC personnel or comparable defensive cybersecurity operations.\nExperience directing alert triage, threat hunting, investigations, and incident response.\nAbility to manage operational priorities, analyst development, coverage, and handoffs.\nKnowledge of networks, endpoints, cloud environments, logs, and common cyberattack techniques.\nExperience with security monitoring, endpoint detection, vulnerability tools, and detection tuning.\nAbility to coordinate remediation and response across operations, engineering, and cybersecurity teams.\nUnderstanding of evidence handling, secure configurations, compliance records, and operational risk.\nStrong judgment and communication skills for timely Government reporting and incident coordination\n Duties:Lead SOC analysts and assigned response personnel; prioritize work, coach staff, review investigations, and maintain clear accountability for operational actions.\nPlan assigned staffing, coverage, on-call rotations, and handoffs to support required on-site and global response capabilities.\nSupport SOC stand-up planning, tool configuration, sensor integration with command and control (C2) nodes, and enterprise scanning readiness.\nCoordinate centralized defensive operations, including monitoring, penetration testing support, threat hunting, cyber orders and taskers, and incident response.\nOversee alert triage and analysis of security events and trends; validate findings, assess mission impact, and direct approved mitigation actions.\nLead data and intelligence-driven threat hunting and anomaly investigations across DC3 information technology (IT) and operational technology (OT) environments.\nDirect incident detection, investigation, escalation, and approved containment, eradication, and recovery; keep Government stakeholders informed under established procedures.\nReview investigation evidence, incident timelines, and reports for accuracy and completeness; ensure response actions and handoffs are documented.\nCoordinate weekly vulnerability assessments with certified specialists; prioritize findings and track remediation with infrastructure, application, and cybersecurity teams.\nMaintain effective C2 coordination with Cybersecurity Service Providers (CSSPs), the AFCYBER Operations Center, and applicable higher headquarters authorities.\nManage assigned cyber orders and taskers, coordinate implementation, and support required compliance documentation and Plans of Action and Milestones (POA&Ms).\nAssess SOC tools, telemetry coverage, and resource needs; recommend procurement and operational improvements through approved Government processes.\nMaintain incident response procedures, escalation guides, and operational documentation; incorporate lessons learned and submit required updates for Government approval.\nCoordinate with ISSOs and the ISSM to provide monitoring evidence and remediation status supporting RMF, authorization, and enterprise risk activities.\nRecommend improvements based on emerging threats, cybersecurity practices, and technologies, including benefits, risks, and implementation approaches.","description_format":"text","description_chars":3412,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response"],"lifecycle":[{"event":"open","at":"2026-10-15T04:37:32Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":36,"reasons":["conf:1","win:early"],"computed_at":"2026-10-15T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/cfocussoftware-usaf-soc-lead-cfocus-software-incorporated","json_url":"https://alion.io/job/cfocussoftware-usaf-soc-lead-cfocus-software-incorporated.json","meta":{"generated_at":"2026-10-15T06:30:50Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":9788,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4419850},"rest":"https://alion.io/mcp/rest/get_company?id=4419850"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcfocussoftware-usaf-soc-lead-cfocus-software-incorporated"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcfocussoftware-usaf-soc-lead-cfocus-software-incorporated"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcfocussoftware-usaf-soc-lead-cfocus-software-incorporated"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/cfocussoftware-usaf-soc-lead-cfocus-software-incorporated\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcfocussoftware-usaf-soc-lead-cfocus-software-incorporated"}]}