Back to jobs New SOC Operations Manager Fort Collins, Colorado, United States; Kansas City, Missouri, United States; Washington, DC Apply Revolutional delivers advanced technology solutions and mission support to federal agencies across civilian, health, and national security environments. We apply modern capabilities, including AI/ML, cloud, cybersecurity, and IT modernization to solve complex challenges, enable faster and more secure operations, and drive measurable mission outcomes. We are redefining how federal technology gets built and delivered by operating with a product mindset, prioritizing speed, ownership, and execution over bureaucracy.

SOC Operations Manager Location:

Washington, DC, Ft. Collins, CO, or Kansas City, MO (remote optional, local preferred)

Terms:

Full-time Clearance:

Active Secret required

Travel:

0-10% Project Description This position supports a large-scale federal security operations program delivering 24/7/365 continuous monitoring, intrusion detection, incident response, and threat intelligence across a complex enterprise network environment. The SOC operates under demanding federal cybersecurity compliance requirements and supports multiple government stakeholders across classified and unclassified networks.

The core challenge:

sustaining Tier 2 threat watch operations at enterprise scale — validating events, driving accurate incident assessment, and keeping Tier 1 analysts focused, calibrated, and mission-ready around the clock. Position Description As a SOC Operations Manager at Revolutional, you lead the Tier 2 Threat Watch Officer function and are the senior operational authority for event validation, incident assessment, and analyst oversight during your watch. You validate and confirm security events, assess operational impact, correlate anomalies across IDS, IPS, and SIEM platforms, and make real-time recommendations that shape the program's defensive posture. You are a technically deep operator and a credible team leader. You oversee Tier 1 staff, author intrusion detection signatures, monitor High Value Assets, and maintain current threat awareness that you actively apply to improve the program's detection and response capabilities. When events require interagency coordination, you are the person who initiates and manages that engagement. What You Will Own Tier 2 Threat Watch Officer function and operational leadership Security event validation, impact assessment, and escalation decisions

IDS/IPS/SIEM

anomaly correlation and network configuration recommendations Intrusion detection signature authorship and maintenance High Value Asset monitoring and protection oversight Tier 1 analyst oversight, performance, and operational discipline Interagency coordination for significant security events Current threat awareness and its application to enterprise security posture Responsibilities Lead the Tier 2 Threat Watch Officer function; serve as the senior operational authority for event triage, validation, and incident assessment during assigned watch periods Validate and confirm security events; assess operational impact and determine appropriate response actions, escalation paths, and stakeholder notifications Correlate anomalies across IDS, IPS, and SIEM platforms to distinguish genuine threats from false positives and identify complex, multi-vector attack patterns Recommend network configuration changes to mitigate identified threats, close detection gaps, and strengthen defensive posture Author and maintain intrusion detection signatures to improve detection fidelity against current and emerging threat actors and TTPs Monitor High Value Assets and ensure heightened detection coverage, alert fidelity, and response readiness for critical systems Coordinate with law enforcement, counterintelligence, and interagency partners on significant security events requiring external collaboration or notification Oversee Tier 1 SOC analysts; direct workload, validate analyst actions, enforce SOC procedures, and provide real-time coaching during active events Maintain current awareness of the threat landscape, adversary TTPs, and emerging attack vectors; actively apply threat intelligence to improve program detection and response capabilities Develop and contribute to SOC playbooks, standard operating procedures, and shift documentation Produce accurate shift reports, incident summaries, and escalation notifications for program leadership and government stakeholders Write scripts in Python or equivalent languages to automate analyst workflows, improve detection capabilities, or support SOC tool management What You Bring (Requirements) Baseline Requirements Bachelor's degree in Computer Science, Information Security, or related field (or equivalent experience) 5 or more years of security operations experience, including hands-on Tier 2 or senior SOC analyst experience Demonstrated experience in a supervisory or team lead capacity overseeing SOC analysts or watch floor operations Active Secret clearance required Technical & Domain Capabilities Deep experience with security event validation, IDS/IPS/SIEM correlation, and incident impact assessment in enterprise network environments Hands-on experience authoring intrusion detection signatures for IDS/IPS platforms Proficiency with SIEM platforms: search, correlation rule development, alert tuning, and dashboard operations Experience monitoring High Value Assets and applying elevated detection and response protocols Demonstrated ability to recommend and communicate network configuration changes based on threat analysis findings Experience coordinating with external agencies or government partners during significant security events Proficiency scripting in Python or equivalent language for SOC automation, workflow improvement, or tool integration Current knowledge of adversary TTPs, threat actor trends, and the federal cybersecurity threat landscape Familiarity with

FISMA, NIST

incident response frameworks, and federal security operations standards Core Strengths Technically authoritative Tier 2 operator — your event assessments are accurate, well-reasoned, and defensible under scrutiny Decisive under pressure: you make sound calls on complex, fast-moving events without waiting for perfect information Effective supervisor who holds Tier 1 analysts to standard, develops their tradecraft, and keeps the watch floor operationally disciplined Clear communicator who produces crisp incident documentation, sharp shift handoffs, and credible interagency coordination Certifications One or more of the following is preferred:

CISSP, GCIA

(GIAC Certified Intrusion Analyst), GCIH (GIAC Certified Incident Handler), CySA+, or equivalent security operations credential Nice to Have (Differentiators) Experience leading Tier 2 operations in a federal civilian, defense, or intelligence SOC environment Background in intrusion detection signature development for commercial and custom IDS/IPS platforms Familiarity with High Value Asset (HVA) monitoring frameworks and

CISA HVA

assessment processes Experience with threat hunting or kill-chain-based detection methodologies Familiarity with Zero Trust monitoring or cloud-native SOC operations Active TS/SCI clearance #DICE #LinkedIn ___________________________________________________________________________________________________________ Here at Revolutional we are pleased to have been repeatedly recognized for our outstanding work culture, the innovative work we do, and the employees on our team who make a difference each day.

Some of these recognitions include:

Recognized as a Top 20 "Best Place to Work in Virginia" Recipient of Department of Labor's HireVets Gold Medallion Great Place to Work Certification for five years running A Virginia Chamber of Commerce Fantastic 50 company A Northern Virginia Technology Council Tech 100 company Inc. 5000 list of fastest growing companies for eleven years Two-time

SBA SBIR

Tibbett's Award winner Virginia Values Veterans (V3) Certification We recognize that every bit of our success is the result of our teams of hard-working, motivated, and innovative professionals who are proud to call themselves part of the Revolutional family! In addition to competitive compensation, a family-focused culture, and a dynamic, productive work environment, we offer all full-time employees a variety of benefits including, but not limited to Traditional and HSA

• eligible medical insurance plans 100% employer-paid dental and vision insurance options 100% employer-sponsored STD, LTD, and life insurance 5% 401(k) company matching Flexible-schedules and teleworking options Paid holidays and PTO Accrual Plans Paid Parental Leave Professional development and career growth opportunities Team and company-wide events, recognition, and appreciation
• and so much more!

Check out our Revolutional | LinkedIn to find out a little more about who we are and if we are the right next step for your career! Revolutional is an Equal Opportunity Employer providing equal employment opportunity to all employees and applicants for employment without regard to race, color, religion, national origin, age, gender, gender identity, sexual orientation, disability, or genetics. Revolutional does and will take affirmative action to employ and advance in employment individuals with disabilities and protected veterans. To perform the above job successfully, an individual must possess the knowledge, skills, and abilities listed; meet the education and work experience required; and must be able to perform each essential duty and responsibility satisfactorily. Other duties in addition to those listed may be assigned as necessary to meet business needs. Reasonable accommodation will be made to enable an applicant with a disability to successfully apply for and/or perform the essential duties of the job. If you are in need of an accommodation, please contact HR@revolutional.com . Create a Job Alert Interested in building your career at Revolutional, LLC? Get future opportunities sent straight to your email. Create alert Apply for this job

• indicates a required field Quick Apply with MyGreenhouse First Name
• Last Name
• Preferred First Name Email
• Phone Country Phone Resume/CV Attach Attach Dropbox Enter manually Enter manually Accepted file types: pdf, doc, docx, txt, rtf Cover Letter Attach Attach Dropbox Enter manually Enter manually Accepted file types: pdf, doc, docx, txt, rtf LinkedIn Profile Website Are you authorized to work for any employer in the United States?
• Select... Will you at any time require sponsorship from Revolutional to obtain or extend your authorization to work in the United States?
• Select... Have you been employed by Revolutional/Harmonia/Maveris in the past? If yes, please provide your last date employed by the company.
• Are you related to anyone that works for Revolutional?
• Select... If you are related to a current employee at Revolutional please provide the name of the employee and your relation to them. Were you referred by a current employee of Revolutional?
• Select... If you were referred by a current employee of Revolutional, please provide the person's name who referred you. What are your salary expectations?
• $0•$50,000 $50,000•$65,000 $65,000•$80,000 $80,000•$100,000 $100,000•$120,000 $120,000•$140,000 $140,000•$160,000 $160,000•$180,000 $180,000•$200,000 $200,000+ Do you have an active Secret clearance or higher?

• Select... Do you have 5 or more years of security operations experience, including hands-on Tier 2 or senior SOC analyst experience?
• Select... Do you have demonstrated experience in a supervisory or team lead capacity overseeing SOC analysts or watch floor operations?
• Select... Do you have experience supporting federal cybersecurity, security operations, or enterprise technology programs at scale?
• Select.

.. Voluntary Self-Identification For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file. As set forth in Revolutional, LLC's Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law. Gender Select... Are you Hispanic/Latino? Select... Race & Ethnicity Definitions If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows: A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability. A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service. An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense. An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985. Veteran Status Select... Voluntary Self-Identification of Disability Form CC-305 Page 1 of 1 OMB Control Number 1250-0005 Expires 04/30/2026 Why are you being asked to complete this form? We are a federal contractor or subcontractor. The law requires us to provide equal employment opportunity to qualified people with disabilities. We have a goal of having at least 7% of our workers as people with disabilities. The law says we must measure our progress towards this goal. To do this, we must ask applicants and employees if they have a disability or have ever had one. People can become disabled, so we need to ask this question at least every five years. Completing this form is voluntary, and we hope that you will choose to do so. Your answer is confidential. No one who makes hiring decisions will see it. Your decision to complete the form and your answer will not harm you in any way. If you want to learn more about the law or this form, visit the U.S. Department of Labor's Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp . How do you know if you have a disability? A disability is a condition that substantially limits one or more of your "major life activities." If you have or have ever had such a condition, you are a person with a disability.