Security Operations Center (SOC) Manager

SOC Manager – Integration & Operations Lead

Entarian is seeking a highly capable and mission-focused Security Operations Center (SOC) Manager to lead the integration, maturation, and day-to-day execution of cybersecurity operations within the meshONE-T program.

This role is responsible for transforming cybersecurity from distributed activities into a unified, intelligence-driven operational capability integrated with network operations, engineering, and compliance. The SOC Manager will drive the stand-up and evolution of SOC function-establishing structure, improving coordination, and enabling a proactive, mission-aligned defense posture.

This position operates in a matrixed environment, exercising operational direction across multiple functional teams while formal organizational alignment continues to evolve. The role is expected to grow into full leadership of cybersecurity functions as the program matures toward a next-generation Mission - Network Operations and Security Center (M-NOSC).

As the SOC Manager, you will:

• Lead the integration and execution of cybersecurity operations across the meshONE-T program
• Establish a structured, scalable SOC capability from currently distributed functions
• Drive unity of effort across NOC, engineering, and accreditation teams for coordinated operations and response
• Implement standard processes, playbooks, and escalation models to enable consistent execution
• Shift cybersecurity posture from reactive to proactive and intelligence-driven
• Introduce automation, analytics, and modern tooling to improve detection and response
• Serve as a key operational leader in the evolution toward a M-NOSC end-state

SOC Operations & Capability Development:

• Assess current cybersecurity tools, workflows, and operational gaps
• Stand up and mature SOC functions including monitoring, detection, response, and reporting
• Develop and implement incident response playbooks and operational runbooks
• Establish structured escalation, coordination, and communication models
• Drive consistency across shifts, teams, and mission partners

Operational Leadership in a Matrixed Environment:

• Provide operational direction and tasking across cybersecurity, NOC, and engineering teams
• Synchronize activities across organizations that do not fall under direct reporting authority
• Serve as senior escalation point for cybersecurity incidents
• Build alignment and accountability across stakeholders to ensure mission success

Governance, Compliance & Control Integration:

• Operationalize cybersecurity practices aligned with NIST, RMF, and Zero Trust principles
• Transition compliance from periodic activity to continuous operational integration
• Establish accountability for control implementation and evidence collection
• Support audit readiness and mission assurance objectives

Modernization & Technology Integration:

• Lead integration of SIEM, SOAR, EDR, and observability platforms into a cohesive SOC ecosystem
• Drive automation and orchestration to improve response time and reduce manual effort
• Introduce threat intelligence and analytics to enhance detection and situational awareness

Threat-Informed Defense:

• Establish threat intelligence and threat hunting capabilities
• Correlate threat activity with operational and mission impact
• Continuously refine detection logic and response strategies

Mission Integration & Collaboration:

• Partner with meshONE-T leadership, network operations, engineering teams, and mission stakeholders
• Ensure cybersecurity activities are aligned with mission priorities and operational objectives
• Strengthen cross-team communication and shared situational awareness

Organizational Growth & Future State Development:

• Build the foundation for a scalable cybersecurity operating model
• Mentor and influence personnel across teams to improve cybersecurity capability
• Contribute to the long-term transition toward a fully integrated M-NOSC
• Prepare the organization for future centralized cybersecurity leadership and structure
• Develop training and exercises to improve tactics, techniques and procedures

Position Details:

• Job Type: Full-Time, Monday through Friday (after-hours support as needed for incidents)
• Work Environment: In-office
• Location: Colorado Springs, CO (Entarian office)
• Travel: Limited, primarily within the Colorado Front Range
• Salary Range: $165,000 – $185,000 (negotiable based on experience, clearance, and qualifications)

Minimum Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, or related field (or equivalent experience)
• 10+ years of cybersecurity operations experience
• 5+ years leading cybersecurity operations, SOC functions, or cross-functional initiatives
• Experience operating in matrixed or multi-team environments without direct authority
• Hands-on experience with SIEM, SOAR, EDR, and vulnerability management platforms
• Strong knowledge of NIST CSF, RMF, and Zero Trust principles
• DoD 8570/8140 IAT Level II or higher (Security+, CISSP, or equivalent)
• Active or eligible Top Secret/SCI clearance

Desired Qualifications

• Experience standing up or maturing a Security Operations Center (SOC)
• Background in large-scale operations centers (SOC/NOC/M-NOSC environments)
• Experience with SOC 2, ISO 27001, or audit readiness programs
• Familiarity with automation, DevSecOps, or infrastructure-as-code approaches
• Experience supporting DoD or federal mission environments

About Us:

Formed through the strategic union of Sev1Tech and ERT, Entarian is a premier provider of mission-critical engineering and technology solutions. Founded on a legacy of excellence dating back to 1993, Entarian is a product of an evolved and fully diversified engineering and federal technology leader. From deep space to defense and civilian missions, Entarian delivers secure, mission-aligned digital solutions that drive national resilience and operational effectiveness. We don't just support modernization; we define it.

Join the Mission and Start your Career Journey: Apply Directly via our Careers Portal