SOC Cyber Security Manager

Responsibilities for this Position

Location: USA VA Falls Church
Full Part/Time: Full time
Job Req: RQ226051

Type of Requisition:
Regular

Clearance Level Must Currently Possess:
Secret

Clearance Level Must Be Able to Obtain:
Secret

Public Trust/Other Required:
None

Job Family:
Cyber and IT Risk Management

Job Qualifications:

Skills:
Cyber Security Management, Data Protection, Digital Forensics, Leadership, Team Management
Certifications:
None
Experience:
7 + years of related experience
US Citizenship Required:
Yes

Job Description:

SOC Cyber Security Manager
Location: Fairview Park, Falls Church, VA
Schedule: M-F, 0700-1500 | Onsite | <10% travel

At GDIT, we secure and support some of the most challenging government, defense, and intelligence missions. Your work will help make today safer and tomorrow smarter in a culture that values autonomy, collaboration, and high performance.

GDIT has an opening for a SOC Cyber Security Manager supporting the Army National Guard (ARNG) on an IT Service Management contract that operates within the ITIL framework. This program delivers and protects ARNG's global IT services across networking, compute, storage, infrastructure, cybersecurity, applications, hosting, and program management. This role leads the team that defends those services.

As the SOC Cyber Security Manager, you'll combine hands-on technical leadership with people management-overseeing SOC operations, mentoring analysts, and ensuring alignment with ARNG and DoW cybersecurity standards and mission requirements.

MEANINGFUL WORK AND PERSONAL IMPACT

Lead SOC Operations & Team Management

• Manage day-to-day SOC operations: monitoring, incident triage, response, and escalation.
• Lead, coach, and develop SOC analysts, including feedback, performance management, and career development in line with GDIT people manager requirements and training.
• Maintain SOC procedures, playbooks, and SOPs for consistent, high-quality event response.
• Set priorities, assign work, and ensure coverage across shifts.
• Serve as the primary SOC point of contact for ARNG stakeholders and GDIT teams.

Technical Cyber Defense & Forensics

• Oversee and, as needed, perform forensic analysis to identify intrusion indicators and threat actors.
• Use data from tools such as IDS, firewalls, SIEM, network logs, and endpoint security to analyze events and lead mitigation.
• Interpret and report events and anomalies per network defense directives, ensuring timely response and reporting.
• Direct evaluation, testing, recommendation, and maintenance of cybersecurity tools, policies, procedures, and access management.

Policy, Standards & Risk Management

• Ensure SOC plans, controls, and procedures align with DoW, Army, NIST, and ARNG cybersecurity standards.
• Identify risks and exposures, determine root causes, and drive corrective and preventive actions.
• Refine techniques for risk assessments, compliance audits, and incident investigations.
• Oversee data correlation and SIEM content design to enable effective threat detection and mapping to users, systems, and threat actors.

Stakeholder Coordination & Governance

• Coordinate cybersecurity inspections, tests, and reviews with all stakeholders.
• Oversee ARNG support for eMASS structure and workflow.
• Coordinate cybersecurity papers and plans with partners such as CYBERCOM, ARCYBER, Air National Guard Cyber, NSA, FBI, DOJ, and DHS.
• Support enforcement of DoW Cyberspace Workforce Framework and certification programs across the SOC team.
• Assist ARNG with streamlined processes for eMASS access requests in support of RMF.

Architecture, Vulnerability Management & Authorization Support

• Lead security architecture and vulnerability reviews with system owners and admins, including scans, configuration reviews, and documentation analysis.
• Oversee dissemination of approved policy and process documentation for system authorization (DoW, Army, NIST guidance).
• Collaborate with engineering and operations to recommend hardening and architectural improvements based on SOC findings.

WHAT YOU'LL NEED TO SUCCEED

Education

• Preferred: Bachelor's in cybersecurity, information assurance, computer science, or related field; or equivalent combination of education, certifications/training, and experience.

Experience

• Typically 7+ years in cybersecurity, information assurance, or related fields.
• 2+ years leading or managing a cyber or SOC team (formal or informal leadership).

Skills & Attributes

• Strong analytical, problem-solving, and decision-making skills.
• Proven experience with enterprise security tools (SIEM, IDS/IPS, firewalls, endpoint protection, vulnerability scanners).
• Demonstrated ability to manage and mentor staff, conduct reviews, and support career development; willingness to complete all required GDIT people manager training.
• Organized, reliable, able to manage multiple priorities in a fast-paced SOC.
• Strong customer-service orientation; comfortable with senior military and government stakeholders.
• Clear verbal and written communication in meetings, briefings, and incident reports.
• Preferred familiarity with DoW 2875, ACTCS, RMF, and eMASS.
• Self-motivated, quick learner, committed to staying current with threats, best practices, and certifications.
• Able to work under pressure, adapt to changing priorities, and drive continuous improvement.
• Performs other duties as assigned in support of the mission.

Certifications

• Must hold a baseline certification meeting DoW 8570.01-M IAT Level II (e.g., CompTIA Security+ CE) prior to start.
• Must obtain a computing environment / CSSP-related certification (e.g., CEH, CCNA-Security, CND) within six months of hire, based on role designation.
• Higher-level certifications (e.g., CISSP, CASP+, CISM) are highly desired.

Clearance

• Active Secret clearance required at time of interview; must be maintained.

GDIT IS YOUR PLACE

• Growth: AI-powered career tools that identify next steps and learning paths.
• Support: Dedicated internal mobility team focused on your career goals.
• Rewards: Comprehensive benefits and wellness programs, 401(k) with company match, competitive pay, and paid time off.
• Community: Award-winning culture of innovation and a military-friendly workplace.

OWN YOUR OPPORTUNITY
Step into a cybersecurity leadership role at GDIT and guide mission-critical work that protects national security-while growing alongside colleagues who share your commitment to delivering results.

The likely salary range for this position is $153,000 - $207,000. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.

Scheduled Weekly Hours:
40

Travel Required:
Less than 10%

Telecommuting Options:
Onsite

Work Location:
USA VA Falls Church

Additional Work Locations:

Total Rewards at GDIT:
Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match. To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave. To ensure our employees are able to protect their income, other offerings such as short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available. We regularly review our Total Rewards package to ensure our offerings are competitive and reflect what our employees have told us they value most.

Our Identity Verification Process:
As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during virtual interviews. We reserve the right to take your picture to verify your identity and prevent fraud. By proceeding, you authorize the collection, processing, and use of your biometric data for identity verification and security purposes.

About Our Work:
We are GDIT. A global technology and professional services company that delivers technology solutions and mission services to every major agency across the U.S. government, defense and intelligence community. Our 26,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50+ countries worldwide, offering leading mission-ready capabilities in AI, cloud, cyber and software development.

Join our Talent Community to stay up to date on our career opportunities and events at
gdit.com/tc .

Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans

PI286432322

SOC Cyber Security Manager
Location: Fairview Park, Falls Church, VA
Schedule: M-F, 0700-1500 | Onsite | <10% travel




At GDIT, we secure and support some of the most challenging government, defense, and intelligence missions. Your work will help make today safer and tomorrow smarter in a culture that values autonomy, collaboration, and high performance.




GDIT has an opening for a SOC Cyber Security Manager supporting the Army National Guard (ARNG) on an IT Service Management contract that operates within the ITIL framework. This program delivers and protects ARNG's global IT services across networking, compute, storage, infrastructure, cybersecurity, applications, hosting, and program management. This role leads the team that defends those services.




As the SOC Cyber Security Manager, you'll combine hands-on technical leadership with people management-overseeing SOC operations, mentoring analysts, and ensuring alignment with ARNG and DoW cybersecurity standards and mission requirements.







MEANINGFUL WORK AND PERSONAL IMPACT







Lead SOC Operations & Team Management

• Manage day-to-day SOC operations: monitoring, incident triage, response, and escalation.
• Lead, coach, and develop SOC analysts, including feedback, performance management, and career development in line with GDIT people manager requirements and training.
• Maintain SOC procedures, playbooks, and SOPs for consistent, high-quality event response.
• Set priorities, assign work, and ensure coverage across shifts.
• Serve as the primary SOC point of contact for ARNG stakeholders and GDIT teams.

Technical Cyber Defense & Forensics

• Oversee and, as needed, perform forensic analysis to identify intrusion indicators and threat actors.
• Use data from tools such as IDS, firewalls, SIEM, network logs, and endpoint security to analyze events and lead mitigation.
• Interpret and report events and anomalies per network defense directives, ensuring timely response and reporting.
• Direct evaluation, testing, recommendation, and maintenance of cybersecurity tools, policies, procedures, and access management.

Policy, Standards & Risk Management

• Ensure SOC plans, controls, and procedures align with DoW, Army, NIST, and ARNG cybersecurity standards.
• Identify risks and exposures, determine root causes, and drive corrective and preventive actions.
• Refine techniques for risk assessments, compliance audits, and incident investigations.
• Oversee data correlation and SIEM content design to enable effective threat detection and mapping to users, systems, and threat actors.

Stakeholder Coordination & Governance

• Coordinate cybersecurity inspections, tests, and reviews with all stakeholders.
• Oversee ARNG support for eMASS structure and workflow.
• Coordinate cybersecurity papers and plans with partners such as CYBERCOM, ARCYBER, Air National Guard Cyber, NSA, FBI, DOJ, and DHS.
• Support enforcement of DoW Cyberspace Workforce Framework and certification programs across the SOC team.
• Assist ARNG with streamlined processes for eMASS access requests in support of RMF.

Architecture, Vulnerability Management & Authorization Support

• Lead security architecture and vulnerability reviews with system owners and admins, including scans, configuration reviews, and documentation analysis.
• Oversee dissemination of approved policy and process documentation for system authorization (DoW, Army, NIST guidance).
• Collaborate with engineering and operations to recommend hardening and architectural improvements based on SOC findings.

WHAT YOU'LL NEED TO SUCCEED







Education

• Preferred: Bachelor's in cybersecurity, information assurance, computer science, or related field; or equivalent combination of education, certifications/training, and experience.

Experience

• Typically 7+ years in cybersecurity, information assurance, or related fields.
• 2+ years leading or managing a cyber or SOC team (formal or informal leadership).

Skills & Attributes

• Strong analytical, problem-solving, and decision-making skills.
• Proven experience with enterprise security tools (SIEM, IDS/IPS, firewalls, endpoint protection, vulnerability scanners).
• Demonstrated ability to manage and mentor staff, conduct reviews, and support career development; willingness to complete all required GDIT people manager training.
• Organized, reliable, able to manage multiple priorities in a fast-paced SOC.
• Strong customer-service orientation; comfortable with senior military and government stakeholders.
• Clear verbal and written communication in meetings, briefings, and incident reports.
• Preferred familiarity with DoW 2875, ACTCS, RMF, and eMASS.
• Self-motivated, quick learner, committed to staying current with threats, best practices, and certifications.
• Able to work under pressure, adapt to changing priorities, and drive continuous improvement.
• Performs other duties as assigned in support of the mission.

Certifications

• Must hold a baseline certification meeting DoW 8570.01-M IAT Level II (e.g., CompTIA Security+ CE) prior to start.
• Must obtain a computing environment / CSSP-related certification (e.g., CEH, CCNA-Security, CND) within six months of hire, based on role designation.
• Higher-level certifications (e.g., CISSP, CASP+, CISM) are highly desired.

Clearance

• Active Secret clearance required at time of interview; must be maintained.

GDIT IS YOUR PLACE

• Growth: AI-powered career tools that identify next steps and learning paths.
• Support: Dedicated internal mobility team focused on your career goals.
• Rewards: Comprehensive benefits and wellness programs, 401(k) with company match, competitive pay, and paid time off.
• Community: Award-winning culture of innovation and a military-friendly workplace.

OWN YOUR OPPORTUNITY
Step into a cybersecurity leadership role at GDIT and guide mission-critical work that protects national security-while growing alongside colleagues who share your commitment to delivering results.




The likely salary range for this position is $153,000 - $207,000. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.







Scheduled Weekly Hours:
40







Travel Required:
Less than 10%







Telecommuting Options:
Onsite







Work Location:
USA VA Falls Church







Additional Work Locations:







Total Rewards at GDIT:
Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match. To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave. To ensure our employees are able to protect their income, other offerings such as short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available. We regularly review our Total Rewards package to ensure our offerings are competitive and reflect what our employees have told us they value most.







Our Identity Verification Process:
As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during virtual interviews. We reserve the right to take your picture to verify your identity and prevent fraud. By proceeding, you authorize the collection, processing, and use of your biometric data for identity verification and security purposes.







About Our Work:
We are GDIT. A global technology and professional services company that delivers technology solutions and mission services to every major agency across the U.S. government, defense and intelligence community. Our 26,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50+ countries worldwide, offering leading mission-ready capabilities in AI, cloud, cyber and software development.




Join our Talent Community to stay up to date on our career opportunities and events at


gdit.com/tc .




Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans

PI286432322