SITEC - SOC Manager - MacDill AFB
Peraton · MacDill AFB, FL, US
About this role
**SITEC - SOC Manager - MacDill AFB** **About the Role** Peraton seeks a SOC Manager to support the Special Operations Command Information Technology Enterprise Contract (SITEC-3 EOM) at MacDill AFB, Florida. You'll serve as the senior operational authority directing enterprise-wide Defensive Cyber Operations (DCO) across three integrated SOC tiers. **Key Responsibilities** • Direct and synchronize operations across SOC Tier 1 (24/7/365 Triage & Monitoring), Tier 2 (Incident Response & Detection Engineering), and Tier 3 (Threat Hunting, CTI & Forensics) • Monitor and enforce operational KPIs (MTTA, MTTD, MTTR, false-positive ratios) to ensure SLA compliance • Integrate Cyber Threat Intelligence into proactive hunting and detection pipelines • Implement Detection-as-Code, SIEM rules, and SOAR playbooks aligned with MITRE ATT&CK • Author and maintain DCO doctrine, Incident Response Plans, and operational runbooks • Drive recruitment, training, and 24/7/365 staffing; organize purple team exercises and tabletop drills • Evaluate and integrate cutting-edge security technologies (SIEM, SOAR, EDR, NDR, TIP) **Required Qualifications** • Minimum 12 years of experience • DoD 8570 IAT II Certification • DoD TS/SCI clearance • DoD 8140 compliant (Work Role Code 531 - Cyber Defense Incident Responder, Advanced level) **Desired Qualifications** • Strong analytical and problem-solving skills • Excellent communication with technical and non-technical stakeholders • 5+ years with cyber tools and TTPs • SOC or cyber team management experience **Compensation** $86,000 - $138,000 (based on experience, education, location, and contract factors). Eligible for overtime, shift differential, and discretionary bonus. **About Peraton** A leading national security company delivering mission-critical solutions across defense, intelligence, and enterprise IT. *Equal Opportunity Employer*
Listing freshness
CronJobs last confirmed this listing 23h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.