SITEC - SOC Level 3 Manager - MacDill AFB
Peraton · MacDill AFB, FL, US
About this role
**Peraton — SOC Level 3 Manager (SITEC - 3 EOM)** **Location:** MacDill AFB, Florida ## Overview Peraton is seeking a **Security Operations Center (SOC) Level 3 Manager** to lead enterprise-wide **Defensive Cyber Operations (DCO)** in support of the **Special Operations Forces Information Technology Enterprise Contract (SITEC) 3 — Enterprise Operations and Maintenance (EOM)**. This role provides operational leadership and oversight for advanced defensive capabilities supporting **USSOCOM**, component commands, TSOCs, and deployed forces operating **24x7x365**. ## Responsibilities - Lead **proactive, intelligence-driven threat hunting** across **endpoint, identity, network, cloud, and application** environments. - Provide managerial oversight for **host, memory, network, cloud, and digital forensic investigations**, ensuring **evidence integrity**, **analytical quality**, and **timely reporting**. - Direct **malware triage** and **static/dynamic/behavioral analysis** and **reverse engineering** to identify adversary capabilities and translate findings into **actionable intelligence, detections, and countermeasures**. - Lead development of **strategic cyber threat intelligence** products aligned to mission priorities and emerging threats. - Guide responsible adoption of **advanced analytics**, **machine learning**, **generative AI**, and **agentic capabilities** to improve investigative efficiency, detection coverage, and decision-making. - Direct development, testing, deployment, and continuous improvement of **advanced detections and countermeasures** informed by adversary tradecraft, threat intelligence, incident findings, threat hunts, and **Purple Team** exercises. - Integrate SOC Level 3 capabilities with **SOC Levels 1 and 2** by establishing escalation paths, enabling knowledge transfer, and improving triage procedures, detections, playbooks, and response. ## Required Qualifications - **DoD TS/SCI clearance required** - **Security+** - **DoD 8140 compliant** under **Work Role Code 462 — Cyber Defense Incident Responder - Advanced** - Experience requirements (minimums based on education): - **14 years** with **HS Diploma** - **12 years** with **AS/AA** - **10 years** with **BS/BA** - **8 years** with **MS/MA** - **5 years** with **PhD** ## Highly Desired - Strong analytical and problem-solving skills - Ability to communicate security issues clearly to technical and non-technical stakeholders - Experience managing a SOC or a team of cyber professionals - Minimum **7 years** technical experience with cyber tools and TTPs ## Compensation & Benefits - **Target Salary Range:** **$112,000 – $179,000** (varies by experience, education, location, and contract/business factors) - May be eligible for **overtime**, **shift differential**, and a **discretionary bonus** (role-dependent) - Benefits may include: **medical, dental, vision, life, HSA, short/long-term disability, EAP, parental leave, 401(k), PTO, and company-paid holidays** ## Application Notes - Application period estimated at **30 days** from posting date (may change) - On-camera interview and identity verification may be required - **AI tools during interviews are prohibited** unless prior written authorization is obtained *EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.*
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.