Security Operations Center Operations Lead / Managed Detection & Response Lead

Job overview

The Security Operations Center Operations Lead / Managed Detection & Response Lead role is onsite in Washington, DC. Compensation is not specified. The role supports 24/7/365 SOC and MDR operations for a large federal enterprise environment. The lead directs analysts and incident-response personnel responsible for monitoring, triage, analysis, escalation, containment coordination, and reporting. The role strengthens operational consistency and security response through team leadership, documented procedures, metrics, and coordination with related cyber teams.

What you'll do

• Lead enterprise SOC and MDR operations
• oversee 24/7 monitoring, detection, triage, and escalation
• direct SIEM, alert, incident, case-management, and reporting workflows
• manage analyst teams using listed security platforms
• maintain SOPs, playbooks, runbooks, escalation matrices, and reporting procedures
• report operational metrics
• coordinate with threat hunting, CTI, detection engineering, and incident response
• brief executives and government leadership
• support proposals, presentations, staffing, and transition planning.

What we're looking for

Skills & competencies

soc operations lead

mdr lead

washington dc

cybersecurity operations

federal enterprise

24/7 monitoring

siem

incident response

splunk

microsoft sentinel

crowdstrike

cfocus software

Work arrangement

• Weekend coverage required

Why this role

Supports federal civilian or DoD environments; requires 10+ years of cybersecurity operations experience and 5+ years leading enterprise SOC or MDR environments. Preferred certifications include CISSP, GCIA, GCIH, GMON, GSOC, Splunk, and Microsoft Security certifications.

About the employer

cFocus Software Incorporated is hiring for this role. Industry: Computer Systems Design Services. Sector: 54.