Incident Response Lead — Security Operations Center Shift

Job overview

The Incident Response Lead — Security Operations Center Shift role is hybrid in Arlington, VA, in a federal customer environment; regular onsite presence and periodic travel between supported operating locations may be required. Pay is $110,000–$160,000 per year. The role supports a 24x7 security operations center and its incident-response work. The lead coordinates shift monitoring, triage, investigation, escalation, and response while developing evidence-based findings across on-premises and cloud environments. The position maintains incident records and operational handoffs, supports containment and recovery, troubleshoots assigned tools, and mentors junior analysts to strengthen response quality and continuity.

What you'll do

• Lead an assigned SOC shift
• coordinate monitoring, triage, incident intake, investigation, escalation, and response
• analyze alerts and evidence
• document findings and recommended actions
• support containment, eradication, recovery, and post-incident improvements
• maintain incident records and shift handoffs
• troubleshoot assigned SOC tools
• mentor analysts and contribute to lessons learned and playbooks.

What we're looking for

Skills & competencies

incident response lead

security operations center

arlington va

hybrid

$110k–$160k

cybersecurity

incident response

24x7 shift

on-call coverage

soc shift lead

cloud security

analyst mentoring

federal customer environment

periodic travel

Work arrangement

• Weekend coverage required

Why this role

Requires seven or more years of cybersecurity experience and ability to work an assigned 24x7 shift. A bachelor’s degree is the stated minimum, though additional relevant experience may be considered instead. Secret clearance is preferred but not required. On-call and non-regular-duty coverage may be required.

About the employer

Zermount, Inc is hiring for this role. Industry: All Other Professional, Scientific, and Technical Services. Sector: 54.