Security Operations Center (Soc) Lead
Automate your job search with Sonara.
Submit 10x as many applications with less effort than one manual application.1
Reclaim your time by letting our AI handle the grunt work of job searching.
We continuously scan millions of openings to find your top matches.
Overview
Compensation
$180,000-$210,000/year
Job Description
Security Operations Center (SOC) LeadFalls Church, Virginia.Full-time.Important Notice: This position is contingent upon contract award.Summary:SOC Leads manage daily security operations for assigned networks providing 24/7 security monitoring, incident detection and response. This role coordinates incident response activities, oversees SOC analysts, tunes SIEM detection rules, coordinates with other cybersecurity teams, and serves as primary escalation point for security incidents.Key Responsibilities:
- Manage SOC operations ensuring 24/7 security monitoring.
- Oversee 3-8 SOC analysts across multiple shifts.
- Lead investigation and response for 30-100 security incidents monthly.
- Coordinate major incident response requiring multiple teams.
- Manage SIEM platform (Splunk, ELK, or other) for assigned network.
- Develop and tune 50-200 SIEM detection rules.
- Create 30-80 security use cases for threat detection.
- Review and triage 1,000-5,000 daily security alerts.
- Lead proactive threat hunting activities.
Performance Metrics:
- Daily Alerts: 10,000-50,000 reviewed across team.
- Incidents Managed: 30-100 monthly.
- Team Management: 3-8 SOC analysts.
- SIEM Rules: 50-200 maintained and tuned.
- Use Cases: 30-80 security detection use cases.
- Major Incidents: 3-10 annually requiring complex coordination.
- Monthly Reports: SOC operations and incident metrics.
Requirements:
- Clearance: Secret (NIPR), Top Secret (SIPR), or TS/SCI Eligible (JWICS) based on network assignment.
- Education: Bachelor's Degree in Information Technology, Cybersecurity, Computer Science, or related field.
- Experience: 12+ years cybersecurity operations; 5+ years SOC leadership
- Certifications: IAM-II Level required (CAP, CASP+ CE, CISM, CISSP or Associate, GSLC, CCISO, or HCISPP).
- Technical Knowledge: Expert knowledge of SIEM platforms, incident response, threat hunting, attack frameworks (MITRE ATT&CK), security tools (EDR, NIDS/NIPS, forensics)
About Advana:Advana is the Department of Defense Chief Digital and Artificial Intelligence Office's (CDAO) enterprise-wide data, analytics, and AI platform. Advana provides DoD military and civilian decision makers with unprecedented access to enterprise data, tools, and capabilities in a secure environment. The platform hosts hundreds of curated applications across logistics, financial management, personnel, health, and other domains, accelerating decision advantage through accessible, actionable data and AI capabilities.This position supports comprehensive cybersecurity operations for the Advana platform across three classified networks (NIPR, SIPR, JWICS).Important Notes:Position Status:
- This position is contingent upon contract award.
- Start date will be determined upon contract award.
- We will maintain contact with selected candidates throughout the award process.
Work Requirements:
- U.S. Citizen required.
- Clearance varies by network: Secret (NIPR), Top Secret (SIPR), or TS/SCI Eligible (JWICS).
- On-premises work required at Suffolk Building, Falls Church, VA.
- No remote work options available.
- Standard business hours with operational flexibility.
Benefits:
- 4 Weeks Paid Time Off.
- All Federal Holiday’s Paid Vacation.
- Four Percent Matching 401K.
- Full health/vision/dental benefits for the employee and family paid 100% by ZTI Solutions, LLC.
We thank all applicants for their interest. Only candidates selected for interviews will be contacted.
About ZTI Solutions, LLC:ZTI Solutions, LLC was founded in 1997 in Virginia and is classified as a small business. The company is owned and operated by its founder, Rudy Zadnik, who emphasizes moral and business excellence over increasing company profits. This results in a more customer-oriented attitude towards mission accomplishment, as opposed to growing profits or sales.Our approach to consulting and engineering centers around using only highly skilled personnel who are seasoned industry veterans. All employees hold high-level industry and vendor certifications. We offer a comprehensive set of consulting and staff augmentation services, primarily focused on networking and security consulting in the classified space.
Automate your job search with Sonara.
Submit 10x as many applications with less effort than one manual application.
FAQs About Security Operations Center (Soc) Lead Jobs at ZTI Solutions, LLC
What is the work location for this position at ZTI Solutions, LLC?
This job at ZTI Solutions, LLC is located in Falls Church, VA, according to the details provided by the employer. Some roles may also include multiple work locations depending on the requirement.
What pay range can candidates expect for this role at ZTI Solutions, LLC?
Candidates can expect a pay range of $180,000 and $210,000 per year.
What employment applies to this position at ZTI Solutions, LLC?
The employer has not provided this information. This may be discussed during the hiring process.
What is the process to apply for this position at ZTI Solutions, LLC?
You can apply for this role at ZTI Solutions, LLC either through Sonara's automated application system, which helps you submit applications 10X faster with minimal effort, or by applying manually using the direct link on the job page.