SOC Manager

Runs the round-the-clock security operations centre on a large federal cybersecurity programme for Accenture Federal Services, based in Washington, DC. The manager leads a tiered structure of analysts working alongside AI-driven detection and response tools, and is the SOC's final escalation point.

The role owns SOC performance and the detection and response metrics behind it, such as mean time to detect and to respond, and drives steady improvement against them. It sets strategy for the SIEM and SOAR platforms and decides which detection use cases come first, runs staffing, scheduling, training and quality assurance, coordinates the response to significant incidents and leads post-incident reviews, and keeps processes and playbooks current as threats change. Regular briefings on threat intelligence and SOC performance go to programme and client leadership, and the manager works with the threat intelligence, vulnerability management and engineering teams to widen detection coverage.

The team wants ten years in cybersecurity, at least five of them leading a SOC, deep knowledge of SIEM and SOAR platforms, incident response and detection engineering, and a record of building large technical teams in a 24x7 operation. CISSP, CISM or GCIA is required, and GCIH is preferred.