{"id":3592618,"url":"https://alion.io/job/revolutional-incident-response-2nd-shift-lead","title":"Incident Response 2nd Shift Lead","company":{"id":4450998,"name":"Revolutional","domain":"revolutional.com","url":"https://alion.io/company/revolutional","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":91,"open_postings":26,"ghost_share":0,"stale_share":0.577,"repost_share":0,"time_to_fill_p50_days":19,"computed_at":"2026-11-14T05:58:10Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Austin, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":120000,"max":150000,"currency":"USD","period":"year","gross":null,"usd_annual":150000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"ServiceNow","optional":true},{"name":"SIEM","optional":true}],"status":"closed","first_seen_at":"2026-10-29T15:12:37Z","employer_posted_date":"2026-10-29","last_verified_at":"2026-11-11T01:47:21Z","board_verified":false,"closed_at":"2026-11-11T01:47:21Z","days_open":12,"trust":{"level":"ok","repost_count":0,"flags":[],"days_open":11},"description":"Revolutional delivers advanced technology solutions and mission support to federal agencies across civilian, health, and national security environments. We apply modern capabilities, including AI/ML, cloud, cybersecurity, and IT modernization to solve complex challenges, enable faster and more secure operations, and drive measurable mission outcomes.\nWe are redefining how federal technology gets built and delivered by operating with a product mindset, prioritizing speed, ownership, and execution over bureaucracy.\nDescription\nTitle: Cybersecurity Operations Center (CSOC) 2nd Shift Lead\nLocation: Martinsburg, WV or Austin, TX / onsite daily Sunday-Thursday 2nd shift \nTerms: Full-time\nSalary: $120-150k DoE\nClearance: Public Trust\nPosition Description\nAs a Cybersecurity Operations Center (CSOC) 2nd Shift Lead, you will play a critical role in safeguarding the Department of Veterans Affairs (VA) digital assets and responding to potential cyber threats. Your primary focus will be supporting the Incident Response team in investigating and mitigating advanced and complex cyber incidents. \nHiring for 2nd shift (1430-2300 EST / 1330-2200 CST). Candidate must be willing to work onsite daily in Martinsburg, WV or Austin, TX.\nResponsibilities: \nTeam Leadership:Provide leadership and guidance to SOC analysts during your shift\nFoster a collaborative and cohesive team environment\nConduct regular team meetings to discuss priorities, updates, and challenges\n\nCompliance and SLA Management: Ensure adherence to established SLAs for incident response and resolution\nMonitor and report on key performance indicators to meet compliance requirements\nWork closely with management to implement improvements and efficiencies\n\nTriage Activities: Oversee the triage process for incoming security alerts and incidents\nPrioritize incidents based on severity and potential impact\nCollaborate with other teams to ensure timely and effective incident response\n\nTechnical Guidance for Cyber Investigations: Serve as a subject matter expert in handling incidents of varying complexity, providing guidance and support to Tier 1 and Tier 2 analysts during investigations\nCollaborate with the incident response team to analyze and interpret technical data\n\nEnsure Adherence to Standard Operating Procedures (SOPs): Ensure that analysts are knowledgeable about and follow established SOPs\nProvide training to analysts on new procedures and tools\n\nContinuous Improvement: Proactively identify opportunities for process improvement\nWork with the SOC management team to implement enhancements to tools, processes, and workflows \nStay informed about industry trends and emerging threats to enhance the SOC's capabilities\n\nEnsure accurate and detailed documentation of incident response activities, including analysis, actions taken, and lessons learned \nCollaborate effectively with cross-functional teams, including forensics, threat intelligence, IT, and network administrators. Clearly communicate technical information and incident-related updates to management and stakeholders \nRequirements\nBachelor's degree in computer science, cybersecurity, Information Technology, or a related field (or equivalent work experience) \n5+ years of experience supporting large-scale IT related projects \n3+ years of experience supporting incident response in an enterprise-level Security Operations Center (SOC) \nA deep understanding of cybersecurity principles, incident response methodologies, and a proactive mindset to ensure our SOC operates effectively in a high-pressure environment\nIndustry certifications, such as CISSP, GCIH, GCFA, CEH, or equivalent, are highly desirable \nStrong experience with security technologies, including SIEM, IDS/IPS, EDR, and network monitoring tools \nExperience with enterprise ticketing systems like ServiceNow \nExcellent analytical and problem-solving skills\nAbility to work independently and in a team environment to identify errors, pinpoint root causes, and devise solutions with minimal oversight\nAbility to learn and function in multiple capacities and learn quickly\nStrong verbal and written communication skills \nU.S. citizen or legal permanent resident. \nAbility to obtain and maintain a Public Trust clearance\nWork Authorization/Clearance: Must be a U.S. citizen or legal permanent resident and be able to obtain a Federal Government Public Trust Clearance\n___________________________________________________________________________________________________________\nHere at Revolutional we are pleased to have been repeatedly recognized for our outstanding work culture, the innovative work we do, and the employees on our team who make a difference each day. Some of these recognitions include: \nRecognized as a Top 20 \"Best Place to Work in Virginia\"\nRecipient of Department of Labor's HireVets Gold Medallion\nGreat Place to Work Certification for five years running\nA Virginia Chamber of Commerce Fantastic 50 company\nA Northern Virginia Technology Council Tech 100 company \nInc. 5000 list of fastest growing companies for eleven years\nTwo-time SBA SBIR Tibbett's Award winner\nVirginia Values Veterans (V3) Certification\nWe recognize that every bit of our success is the result of our teams of hard-working, motivated, and innovative professionals who are proud to call themselves part of the Revolutional family! In addition to competitive compensation, a family-focused culture, and a dynamic, productive work environment, we offer all full-time employees a variety of benefits including, but not limited to\nTraditional and HSA- eligible medical insurance plans \n100% employer-paid dental and vision insurance options \n100% employer-sponsored STD, LTD, and life insurance\n5% 401(k) company matching\nFlexible-schedules and teleworking options\nPaid holidays and PTO Accrual Plans\nPaid Parental Leave\nProfessional development and career growth opportunities \nTeam and company-wide events, recognition, and appreciation-- and so much more! \nCheck out our Revolutional | LinkedIn to find out a little more about who we are and if we are the right next step for your career! \nRevolutional is an Equal Opportunity Employer providing equal employment opportunity to all employees and applicants for employment without regard to race, color, religion, national origin, age, gender, gender identity, sexual orientation, disability, or genetics. Revolutional does and will take affirmative action to employ and advance in employment individuals with disabilities and protected veterans. To perform the above job successfully, an individual must possess the knowledge, skills, and abilities listed; meet the education and work experience required; and must be able to perform each essential duty and responsibility satisfactorily. Other duties in addition to those listed may be assigned as necessary to meet business needs. Reasonable accommodation will be made to enable an applicant with a disability to successfully apply for and/or perform the essential duties of the job. If you are in need of an accommodation, please contact . \n “Know Your Rights: Workplace Discrimination is Illegal” Poster | U.S. Equal Employment Opportunity Commission","description_format":"text","description_chars":7178,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":["Growth opportunities","Health insurance","Life insurance","Parental leave","Professional development","Vision insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Cybersecurity","National Security","Information Security"],"lifecycle":[{"event":"open","at":"2026-11-01T21:39:55Z"},{"event":"close","at":"2026-11-11T01:47:21Z"}],"visa":[],"liveness":null,"pay":{"stated_usd_annual":150000,"is_top_pay":false},"html_url":"https://alion.io/job/revolutional-incident-response-2nd-shift-lead","json_url":"https://alion.io/job/revolutional-incident-response-2nd-shift-lead.json","meta":{"generated_at":"2026-11-15T02:16:50Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4246,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4450998},"rest":"https://alion.io/mcp/rest/get_company?id=4450998"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Frevolutional-incident-response-2nd-shift-lead"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Frevolutional-incident-response-2nd-shift-lead"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Frevolutional-incident-response-2nd-shift-lead"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/revolutional-incident-response-2nd-shift-lead\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Frevolutional-incident-response-2nd-shift-lead"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3592618}},{"tool":"search_jobs","arguments":{"company":"revolutional.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3592618},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}