Cybersecurity Operations Center (CSOC) 2nd Shift Lead

Harmonia Holdings Group•Martinsburg, WV

2d•Onsite

About The Position

As a Cybersecurity Operations Center (CSOC) 2nd Shift Lead, you will play a critical role in safeguarding the Department of Veterans Affairs (VA) digital assets and responding to potential cyber threats. Your primary focus will be supporting the Incident Response team in investigating and mitigating advanced and complex cyber incidents. Hiring for 2nd shift (1430-2300 EST / 1330-2200 CST). Candidate must be willing to work onsite daily in Martinsburg, WV or Austin, TX.

Requirements

Bachelor's degree in computer science, cybersecurity, Information Technology, or a related field (or equivalent work experience)
5+ years of experience supporting large-scale IT related projects
3+ years of experience supporting incident response in an enterprise-level Security Operations Center (SOC)
A deep understanding of cybersecurity principles, incident response methodologies, and a proactive mindset to ensure our SOC operates effectively in a high-pressure environment
Strong experience with security technologies, including SIEM, IDS/IPS, EDR, and network monitoring tools
Experience with enterprise ticketing systems like ServiceNow
Excellent analytical and problem-solving skills
Ability to work independently and in a team environment to identify errors, pinpoint root causes, and devise solutions with minimal oversight
Ability to learn and function in multiple capacities and learn quickly
Strong verbal and written communication skills

Nice To Haves

Industry certifications, such as CISSP, GCIH, GCFA, CEH, or equivalent, are highly desirable

Responsibilities

Team Leadership: Provide leadership and guidance to SOC analysts during your shift
Foster a collaborative and cohesive team environment
Conduct regular team meetings to discuss priorities, updates, and challenges
Compliance and SLA Management: Ensure adherence to established SLAs for incident response and resolution
Monitor and report on key performance indicators to meet compliance requirements
Work closely with management to implement improvements and efficiencies
Triage Activities: Oversee the triage process for incoming security alerts and incidents
Prioritize incidents based on severity and potential impact
Collaborate with other teams to ensure timely and effective incident response
Technical Guidance for Cyber Investigations: Serve as a subject matter expert in handling incidents of varying complexity, providing guidance and support to Tier 1 and Tier 2 analysts during investigations
Collaborate with the incident response team to analyze and interpret technical data
Ensure Adherence to Standard Operating Procedures (SOPs): Ensure that analysts are knowledgeable about and follow established SOPs
Provide training to analysts on new procedures and tools
Continuous Improvement: Proactively identify opportunities for process improvement
Work with the SOC management team to implement enhancements to tools, processes, and workflows
Stay informed about industry trends and emerging threats to enhance the SOC's capabilities
Ensure accurate and detailed documentation of incident response activities, including analysis, actions taken, and lessons learned
Collaborate effectively with cross-functional teams, including forensics, threat intelligence, IT, and network administrators.
Clearly communicate technical information and incident-related updates to management and stakeholders