{"id":3592625,"url":"https://alion.io/job/revolutional-soc-operations-manager","title":"SOC Operations Manager","company":{"id":4450998,"name":"Revolutional","domain":"revolutional.com","url":"https://alion.io/company/revolutional","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":73,"open_postings":32,"ghost_share":0.531,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":10,"computed_at":"2026-11-08T05:47:12Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Fort Collins, United States","Kansas City, United States","Washington, United States","McLean, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":160000,"max":200000,"currency":"USD","period":"year","gross":null,"usd_annual":200000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Cyber Kill Chain","optional":true},{"name":"Zero Trust","optional":true}],"status":"live","first_seen_at":"2026-07-13T23:53:30Z","employer_posted_date":"2026-10-26","last_verified_at":"2026-11-08T19:34:11Z","board_verified":true,"closed_at":null,"days_open":117,"trust":{"level":"ghost","repost_count":0,"flags":["stale","company_stale"],"days_open":117},"description":"Revolutional delivers advanced technology solutions and mission support to federal agencies across civilian, health, and national security environments. We apply modern capabilities, including AI/ML, cloud, cybersecurity, and IT modernization to solve complex challenges, enable faster and more secure operations, and drive measurable mission outcomes.\nWe are redefining how federal technology gets built and delivered by operating with a product mindset, prioritizing speed, ownership, and execution over bureaucracy.\nSOC Operations Manager\nLocation: Washington, DC, Ft. Collins, CO, or Kansas City, MO (remote optional, local preferred)\nTerms: Full-time\nSalary: $160K - $200K DOE\nClearance: Active Secret required\nTravel: 0-10%\nProject Description\nThis position supports a large-scale federal security operations program delivering 24/7/365 continuous monitoring, intrusion detection, incident response, and threat intelligence across a complex enterprise network environment. The SOC operates under demanding federal cybersecurity compliance requirements and supports multiple government stakeholders across classified and unclassified networks.\nThe core challenge: sustaining Tier 2 threat watch operations at enterprise scale - validating events, driving accurate incident assessment, and keeping Tier 1 analysts focused, calibrated, and mission-ready around the clock.\nPosition Description\nAs a SOC Operations Manager at Revolutional, you lead the Tier 2 Threat Watch Officer function and are the senior operational authority for event validation, incident assessment, and analyst oversight during your watch. You validate and confirm security events, assess operational impact, correlate anomalies across IDS, IPS, and SIEM platforms, and make real-time recommendations that shape the program’s defensive posture.\nYou are a technically deep operator and a credible team leader. You oversee Tier 1 staff, author intrusion detection signatures, monitor High Value Assets, and maintain current threat awareness that you actively apply to improve the program’s detection and response capabilities. When events require interagency coordination, you are the person who initiates and manages that engagement.\nWhat You Will Own\nTier 2 Threat Watch Officer function and operational leadership\nSecurity event validation, impact assessment, and escalation decisions\nIDS/IPS/SIEM anomaly correlation and network configuration recommendations\nIntrusion detection signature authorship and maintenance\nHigh Value Asset monitoring and protection oversight\nTier 1 analyst oversight, performance, and operational discipline\nInteragency coordination for significant security events\nCurrent threat awareness and its application to enterprise security posture\nResponsibilities\nLead the Tier 2 Threat Watch Officer function; serve as the senior operational authority for event triage, validation, and incident assessment during assigned watch periods\nValidate and confirm security events; assess operational impact and determine appropriate response actions, escalation paths, and stakeholder notifications\nCorrelate anomalies across IDS, IPS, and SIEM platforms to distinguish genuine threats from false positives and identify complex, multi-vector attack patterns\nRecommend network configuration changes to mitigate identified threats, close detection gaps, and strengthen defensive posture\nAuthor and maintain intrusion detection signatures to improve detection fidelity against current and emerging threat actors and TTPs\nMonitor High Value Assets and ensure heightened detection coverage, alert fidelity, and response readiness for critical systems\nCoordinate with law enforcement, counterintelligence, and interagency partners on significant security events requiring external collaboration or notification\nOversee Tier 1 SOC analysts; direct workload, validate analyst actions, enforce SOC procedures, and provide real-time coaching during active events\nMaintain current awareness of the threat landscape, adversary TTPs, and emerging attack vectors; actively apply threat intelligence to improve program detection and response capabilities\nDevelop and contribute to SOC playbooks, standard operating procedures, and shift documentation\nProduce accurate shift reports, incident summaries, and escalation notifications for program leadership and government stakeholders\nWrite scripts in Python or equivalent languages to automate analyst workflows, improve detection capabilities, or support SOC tool management\nWhat You Bring (Requirements)\nBaseline Requirements\nBachelor’s degree in Computer Science, Information Security, or related field (or equivalent experience)\n5 or more years of security operations experience, including hands-on Tier 2 or senior SOC analyst experience\nDemonstrated experience in a supervisory or team lead capacity overseeing SOC analysts or watch floor operations\nActive Secret clearance required\nTechnical & Domain Capabilities\nDeep experience with security event validation, IDS/IPS/SIEM correlation, and incident impact assessment in enterprise network environments\nHands-on experience authoring intrusion detection signatures for IDS/IPS platforms\nProficiency with SIEM platforms: search, correlation rule development, alert tuning, and dashboard operations\nExperience monitoring High Value Assets and applying elevated detection and response protocols\nDemonstrated ability to recommend and communicate network configuration changes based on threat analysis findings\nExperience coordinating with external agencies or government partners during significant security events\nProficiency scripting in Python or equivalent language for SOC automation, workflow improvement, or tool integration\nCurrent knowledge of adversary TTPs, threat actor trends, and the federal cybersecurity threat landscape\nFamiliarity with FISMA, NIST incident response frameworks, and federal security operations standards\nCore Strengths\nTechnically authoritative Tier 2 operator - your event assessments are accurate, well-reasoned, and defensible under scrutiny\nDecisive under pressure: you make sound calls on complex, fast-moving events without waiting for perfect information\nEffective supervisor who holds Tier 1 analysts to standard, develops their tradecraft, and keeps the watch floor operationally disciplined\nClear communicator who produces crisp incident documentation, sharp shift handoffs, and credible interagency coordination\nCertifications\nOne or more of the following is preferred:\nCISSP, GCIA (GIAC Certified Intrusion Analyst), GCIH (GIAC Certified Incident Handler), CySA+, or equivalent security operations credential\nNice to Have (Differentiators)\nExperience leading Tier 2 operations in a federal civilian, defense, or intelligence SOC environment\nBackground in intrusion detection signature development for commercial and custom IDS/IPS platforms\nFamiliarity with High Value Asset (HVA) monitoring frameworks and CISA HVA assessment processes\nExperience with threat hunting or kill-chain-based detection methodologies\nFamiliarity with Zero Trust monitoring or cloud-native SOC operations\nActive TS/SCI clearance\n#DICE #LinkedIn\n___________________________________________________________________________________________________________\nHere at Revolutional we are pleased to have been repeatedly recognized for our outstanding work culture, the innovative work we do, and the employees on our team who make a difference each day. Some of these recognitions include: \nRecognized as a Top 20 \"Best Place to Work in Virginia\"\nRecipient of Department of Labor's HireVets Gold Medallion\nGreat Place to Work Certification for five years running\nA Virginia Chamber of Commerce Fantastic 50 company\nA Northern Virginia Technology Council Tech 100 company \nInc. 5000 list of fastest growing companies for eleven years\nTwo-time SBA SBIR Tibbett's Award winner\nVirginia Values Veterans (V3) Certification\nWe recognize that every bit of our success is the result of our teams of hard-working, motivated, and innovative professionals who are proud to call themselves part of the Revolutional family! In addition to competitive compensation, a family-focused culture, and a dynamic, productive work environment, we offer all full-time employees a variety of benefits including, but not limited to\nTraditional and HSA- eligible medical insurance plans \n100% employer-paid dental and vision insurance options \n100% employer-sponsored STD, LTD, and life insurance\n5% 401(k) company matching\nFlexible-schedules and teleworking options\nPaid holidays and PTO Accrual Plans\nPaid Parental Leave\nProfessional development and career growth opportunities \nTeam and company-wide events, recognition, and appreciation-- and so much more! \nCheck out our Revolutional | LinkedIn to find out a little more about who we are and if we are the right next step for your career! \nRevolutional is an Equal Opportunity Employer providing equal employment opportunity to all employees and applicants for employment without regard to race, color, religion, national origin, age, gender, gender identity, sexual orientation, disability, or genetics. Revolutional does and will take affirmative action to employ and advance in employment individuals with disabilities and protected veterans. To perform the above job successfully, an individual must possess the knowledge, skills, and abilities listed; meet the education and work experience required; and must be able to perform each essential duty and responsibility satisfactorily. Other duties in addition to those listed may be assigned as necessary to meet business needs. Reasonable accommodation will be made to enable an applicant with a disability to successfully apply for and/or perform the essential duties of the job. If you are in need of an accommodation, please contact . \n “Know Your Rights: Workplace Discrimination is Illegal” Poster | U.S. Equal Employment Opportunity Commission","description_format":"text","description_chars":9948,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":["Growth opportunities","Health insurance","Life insurance","Parental leave","Professional development","Vision insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Cybersecurity","National Security","Information Security"],"lifecycle":[{"event":"open","at":"2026-11-01T21:39:55Z"}],"visa":[],"liveness":{"score":5,"band":"cold","label":"Long shot","p_open":1,"p_active":0.182,"p_room":0.28,"age_days":117,"expected_fill_days":10,"reasons":["conf:2","stale_co","velocity","ghost","win:tail","crowd:"],"computed_at":"2026-11-08T05:47:12Z"},"pay":{"stated_usd_annual":200000,"is_top_pay":true},"html_url":"https://alion.io/job/revolutional-soc-operations-manager","json_url":"https://alion.io/job/revolutional-soc-operations-manager.json","meta":{"generated_at":"2026-11-08T22:31:10Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":47046,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-09T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4450998},"rest":"https://alion.io/mcp/rest/get_company?id=4450998"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Frevolutional-soc-operations-manager"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Frevolutional-soc-operations-manager"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Frevolutional-soc-operations-manager"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/revolutional-soc-operations-manager\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Frevolutional-soc-operations-manager"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3592625}},{"tool":"search_jobs","arguments":{"company":"revolutional.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3592625},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}