Cyber Security Operations Cell (CSOC) Night Shift Lead

Public Trust: None

Requisition Type: Regular

Your Impact

Own your opportunity to support our nation's defense. Make an impact by connecting and securing critical operations across the globe, keeping our country safe and secure.

Job Description

Advance how our customers operate while you advance your career. Join GDIT as a Cyber Security Operations Cell (CSOC) Night Shift Lead and build an impactful career collaborating with people who are driven and resourceful like you.

MEANINGFUL WORK AND PERSONAL IMPACT:

The successful candidate will lead and manage the night shift of the Cyber Security Operations Cell (CSOC) Night Shift Lead and must be experienced with the USCENTCOM Area of Responsibility (AOR) and mission. The candidate will be responsible for managing the overnight team of analysts on the 24/7 watch schedule. This is a dedicated night shift leadership role requiring a team player capable of managing challenging assignments concerning Cyber Security, Information Assurance, and Computer Network Defense. This role involves mentoring personnel, managing overnight operations, and providing leadership for the cyber defense of the network during night hours.

• Provide leadership, mentorship, and professional development to the night shift team of cyber security analysts.

• Conduct real-time threat analysis for USCENTCOM Headquarters through multiple situational awareness and management tools.

• Monitor Cyber Security sensor grid situational awareness from Tier 0 to Tier 2 and provide mitigation and improvement recommendations; provide analysis both verbally and in writing for all sensor grid disruptions, outages and/or anomalies; coordinate, report and direct network responses through orders, policies, procedures and guidance.

• Perform Cyber Security information gathering from appropriate tools and databases.

• Manage and oversee the real-time threat analysis and monitoring activities of the CSOC during overnight hours.

• Ensure effective operation and situational awareness of the Cyber Security sensor grid.

• Direct and coordinate mitigation and improvement efforts throughout the night shift.

• Serve as the primary senior point of contact during night shift hours for all significant cyber security events and incidents, providing clear and concise reporting and escalation to senior leadership as required.

• Ensure seamless transition and handover of operational status and ongoing incidents to the incoming day shift lead.

• Develop, maintain, and report on performance and capability metrics for the night shift team.

• Oversee the interpretation and analysis of cyber security event categorization and ensure proper handling of anomalies and threat indicators.

• Direct the team's response to cyber threats, events, and incidents in accordance with established orders and policies.

• Lead the review and development of Cyber Security tactics, techniques, and procedures (TTPs) and Standard Operating Procedures (SOPs) with a focus on overnight operations.

• Ensure the night shift team is informed of the latest intelligence on relevant threats and develop appropriate response strategies.

• Manage and report on compliance with USCENTCOM orders.

• Provide expert guidance and support to USCENTCOM AOR NETOPS Centers.

• Oversee the analysis of network or system changes for security impacts and approve countermeasures.

• Lead and participate in Cyber Security risk analysis and assessments.

WHAT YOU’LL NEED TO SUCCEED:

Education and/or Certifications:

• Bachelor's Degree in a technical discipline or equivalent and 5+ years of related experience, including 2+ years in a leadership or management role.

• Must meet DoDM 8140 requirements (e.g., CySA+, SEC+, CEH).

Required Skills:

• Candidate must have proven leadership experience within the USCENTCOM AOR and be thoroughly familiar with its mission.

• Candidate must have strong management and leadership skills, with experience overseeing technical teams.

• Demonstrated ability to work independently and lead a team effectively during overnight hours with limited direct supervision.

• Demonstrated expertise in a wide range of security technologies, including but not limited to Security Information Event Management (SIEM), Intrusion Protection and Intrusion Detection Systems (IDS/IPS), Host Intrusion Detection Systems (HIDS), and malware analysis.

• Excellent communication skills, both verbal and written, with the ability to brief senior military and civil service employees effectively.

• Deep understanding of vulnerabilities, exploits, and the practical application of the DoD Cyber Security program.

• Ability to interpret, enforce, and develop DoD Cyber Security orders, policies, and procedures.

• Strong understanding of Artificial Intelligence (AI) and Machine Learning (ML) concepts and their application in a cybersecurity context.

• Comprehensive knowledge of IT infrastructure architecture, including networks, cloud environments, and operating systems, with a focus on security design and implementation.

Desired Skills:

• Military Experience (Active Duty or Reserves) in a leadership capacity.

• Experience with Splunk, Trellix, Firewalls, Security Onion.

• Experience with Cyber Security in a Joint and Coalition Partner environment.

• Project Management Professional (PMP) certification.

• Clearance: TS/SCI clearance required

GDIT IS YOUR PLACE:

At GDIT, the mission is our purpose, and our people are at the center of everything we do.

• Growth: AI-powered career tool that identifies career steps and learning opportunities

• Support: An internal mobility team focused on helping you achieve your career goals

• Rewards: Comprehensive benefits and wellness packages, 401K with company match, competitive pay and paid time off

• Community: Award-winning culture of innovation and a military-friendly workplace

OWN YOUR OPPORTUNITY:

Explore an enterprise IT career at GDIT and you’ll find endless opportunities to grow alongside colleagues who share your desire to drive operations forward.

#ARMA

#CENTCOM/CITS

#GDITPRIORITY

Work Requirements

Years of Experience

5 + years of related experience

* may vary based on technical training, certification(s), or degree

Certification

Splunk Certified Cybersecurity Defense Analyst | Splunk - Splunk

Project Management Professional (PMP) | Project Management Institute (PMI) - Project Management Institute (PMI)

CompTIA Security+ CE | CompTIA - CompTIA

Travel Required

Less than 10%

Citizenship

U.S. Citizenship Required