SOC Tier 3 and Incident Response Lead

Job overview

The SOC Tier 3 and Incident Response Lead role is onsite at a secure Government facility in Fort Bragg, NC. Compensation is not specified. The role supports the U.S. Army Reserve Command Defensive Cyberspace Operations Mission Support Services program. The lead directs complex intrusion analysis and incident response, coordinates response actions with authorized Government stakeholders, and improves threat detection. The role also guides Tier 1 and Tier 2 analysts and strengthens mission support through advanced hunts, complete incident records, and improved playbooks.

What you'll do

• Lead analysis of complex intrusions and suspected advanced persistent threat activity across host, network, and intelligence sources
• direct technical incident investigation, evidence handling, scope assessment, and response recommendations
• coordinate containment, eradication, recovery, and reporting with authorized Government stakeholders
• plan advanced hunts and develop or validate correlation rules, YARA content, and network or host detections
• review significant incident records
• mentor lower-tier analysts
• improve playbooks and support exercises and surge response.

What we're looking for

Skills & competencies

soc tier 3

incident response lead

fort bragg nc

strategic operational solutions

usarc

cyber defense

intrusion analysis

threat hunting

detection engineering

secret clearance

yara

Work arrangement

• Weekend coverage required

Why this role

Requires active SECRET clearance, U.S. citizenship, at least five years of relevant experience, and advanced proficiency for DCWF 531 and 511 work roles. Occasional travel may be required; mission-essential watch roles may include shifts, weekends, and holidays.

About the employer

Strategic Operational Solutions is hiring for this role. Industry: Administrative Management and General Management Consulting Services. Sector: 54.