What are the responsibilities and job description for the Security Operations Center Manager - Security Clearance Required position at ManTech?
ManTech is seeking a highly skilled and knowledgeable Security Operations Center (SOC) Manager to lead a 24x7x365 Watch Floor team and safeguard the confidentiality, integrity, and availability of an organization's information assets. This position is located on customer site in Washington, D.C.
Responsibilities include but are not limited to :
Manage a team that operates 24 / 7, 365 days a year and ensures the timely detection and resolution of potential security incidents, thereby minimizing the impact of cyber threats on the organization.
Lead highly skilled security professionals in actively detecting, monitoring, preventing, and analyzing real-time cybersecurity information, events, and threats.
Work with Program Manager for planning, scheduling, resource assignments and budget.
Manage teams to achieve customer requirements, goals, service levels and quality; ensure products meet NIST security standards.
Responsible for reducing false positives and other extraneous alerts and enhancing threat detection capabilities.
Develop and maintain metrics and SOPs to improve quality of team performance.
Responsible for ensuring cyber updates and notices are sent out daily to Government and other stakeholders.
Manage staffing and staff skill development to include provide mentoring to staff and facilitate knowledge-sharing within the team.
Coordinate with other programs teams - incident response, threat intelligence, forensics and engineering for response and analysis of events as well as assist to optimize tooling.
Work with program leadership to implement continuous improvements to achieve customers requirements and goals.
Coordinate and communicate with government staff at all levels – staff through executive levels – to provide weekly status, updates, issues, and risks.
Lead the response to and resolution of incidents and alerts.
Minimum Qualifications :
Bachelor's degree, preferably in an IT-related or cybersecurity discipline.
8 years cyber experience with a minimum of 5 years managing a SOC of 30 FTEs.
3 years of experience using Splunk.
Must possess at least one (1) of the following certifications :
GIAC Continuous Monitoring Certification (GMON)
GIAC Certified Incident Handler (GCIH)
GIAC Certified Forensic Analyst (GCFA)
GIAC Certified Intrusion Analyst (GCIA)
GIAC Network Forensic Analyst (GNFA)
GIAC Cloud Threat Detection (GCTD)
GIAC Cloud Forensics Responder (GCFR)
Preferred Qualifications :
Experience using Microsoft Sentinel
Security Clearance Requirements :
Must possess active Top Secret security clearance
