{"version":"0.1","company":{"name":"YubHub","url":"https://yubhub.co","jobsUrl":"https://yubhub.co/jobs/city/whitehall/"},"x-facet":{"type":"city","slug":"whitehall","display":"Whitehall","count":1},"x-feed-size-limit":100,"x-feed-sort":"enriched_at desc","x-feed-notice":"This feed contains at most 100 jobs (the most recently enriched). For the full corpus, use the paginated /stats/by-facet endpoint or /search.","x-generator":"yubhub-xml-generator","x-rights":"Free to redistribute with attribution: \"Data by YubHub (https://yubhub.co)\"","x-schema":"Each entry in `jobs` follows https://schema.org/JobPosting. YubHub-native raw fields carry `x-` prefix.","jobs":[{"@context":"https://schema.org","@type":"JobPosting","identifier":{"@type":"PropertyValue","name":"YubHub","value":"job_2644172f-8ca"},"title":"TS Mission Lead - SOC","description":"<p>The TS Mission Lead guides an operational team delivering 24x7 defensive cybersecurity monitoring and incident operations across Department of Defense (DoD) Top Secret and classified enterprise networks.</p>\n<p>Operating on-site, this role balances tactical cyber threat intelligence, alert triaging, packet analysis, and high-impact incident response coordination with a focus on team development, coaching, and operational alignment.</p>\n<p>The position operates on a core 5x8 day shift to ensure maximum availability and continuity across 24x7 shifts, facilitate regular analyst engagements, and maintain communication with program and customer leadership.</p>\n<p><strong>Primary Responsibilities</strong></p>\n<p><strong>Team Leadership &amp; Development</strong></p>\n<ul>\n<li>Conduct 1-on-1 check-ins with team members every two weeks to provide supportive, actionable career guidance, reduce operational burnout, and foster long-term retention.</li>\n<li>Partner with Operations Managers to facilitate advanced technical training, support certification pathways, and deliver objective, performance-driven reviews.</li>\n<li>Establish clear, mission-aligned performance expectations, follow through on team commitments, and address policy compliance and operational gaps fairly and promptly.</li>\n<li>Maintain strong ties with HR and leadership to resolve challenges, build psychological safety in high-stress classified environments, and focus the team on joint problem-solving during operational setbacks.</li>\n<li>Collaborate with Shift Leads and operations leadership on shift coverage, training schedules, and mission readiness within the SCIF, ensuring rapid recall capability during critical incidents.</li>\n</ul>\n<p><strong>Cybersecurity Monitoring &amp; Analysis</strong></p>\n<ul>\n<li>Lead analysts in evaluating alerts from endpoints, IDS/IPS, NetFlow, and custom network sensors across classified enclaves to identify, investigate, and mitigate sophisticated malicious activity.</li>\n<li>Correlate complex multi-source log data to produce detailed Cyber Incident Reports (CIR), integrate tactical threat intelligence feeds into SIEM platforms, and align analysis with MITRE ATT&amp;CK and Cyber Kill Chain frameworks.</li>\n<li>Direct immediate reporting and applicable containment actions and escalate validated, critical security incidents to customer leadership, JFHQ-DODIN, and USCYBERCOM in accordance with DoD reporting standards.</li>\n</ul>\n<p><strong>Basic Qualifications</strong></p>\n<ul>\n<li>Active DoD Top Secret / SCI security clearance</li>\n<li>Current DoD 8570/8140 IAT Level II baseline certification (e.g., Security+ CE, SSCP, GSEC, CySA+).</li>\n<li>Current CSSP-A or CSSP-IR certification (e.g., CySA+, CEH, GCIA, GCIH), or the ability to obtain within 180 days of hire.</li>\n<li>Strong technical mastery of TCP/IP networking, packet analysis (Wireshark/tcpdump), the OSI model, and defense-in-depth principles.</li>\n<li>Bachelor’s degree + 4 year of relevant operational cyber defense or SOC experience (or equivalent military/work experience).</li>\n<li>100% on-site SCIF requirement; willingness to work the assigned 5x8 schedule and reside within a 2-hour physical recall commute of Hill AFB, UT; Scott AFB, IL; or Columbus, OH.</li>\n</ul>\n<p><strong>Preferred Qualifications</strong></p>\n<ul>\n<li>Prior experience supporting DISA, DoD Cyber Security Service Providers (CSSP), or Service Cyber Components</li>\n<li>Hands-on technical experience operating enterprise SIEMs/log aggregators (such as Splunk, Elastic, or Sentinel) on classified networks.</li>\n<li>Familiarity with advanced threat actor TTPs, static/dynamic malware analysis, and CJCSM 6510 incident reporting procedures.</li>\n<li>Advanced cybersecurity certifications (such as SANS GIAC, CASP+, or CISSP).</li>\n<li>At least two years of experience leading, mentoring, or supervising cross-functional cybersecurity teams.</li>\n</ul>\n<p><strong>Pay Range:</strong> $87,100.00 - $157,450.00</p>\n<p style=\"margin-top:24px;font-size:13px;color:#666;\">XML job scraping automation by <a href=\"https://yubhub.co\">YubHub</a></p>","url":"https://yubhub.co/jobs/job_2644172f-8ca/","directApply":true,"hiringOrganization":{"@type":"Organization","name":"Leidos","sameAs":"https://leidos.com","logo":"https://logos.yubhub.co/leidos.com.png"},"x-apply-url":"https://leidos.wd5.myworkdayjobs.com/en-US/External/job/Whitehall-OH/TS-Mission-Lead---SOC_R-00193519?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply","x-work-arrangement":"onsite","x-experience-level":"senior","x-job-type":"full-time","x-salary-range":"$87,100.00 - $157,450.00","x-skills-required":["TCP/IP networking","packet analysis","Wireshark/tcpdump","OSI model","defense-in-depth principles","SIEM platforms","MITRE ATT&CK","Cyber Kill Chain frameworks","DoD 8570/8140 IAT Level II","CSSP-A or CSSP-IR certification"],"x-skills-preferred":["DISA","DoD Cyber Security Service Providers (CSSP)","Service Cyber Components","enterprise SIEMs/log aggregators","Splunk","Elastic","Sentinel","advanced threat actor TTPs","static/dynamic malware analysis","CJCSM 6510 incident reporting procedures","SANS GIAC","CASP+","CISSP"],"datePosted":"2026-10-25T07:20:13.904Z","jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Whitehall, OH"}},"employmentType":"FULL_TIME","occupationalCategory":"Security","industry":"Technology","skills":"TCP/IP networking, packet analysis, Wireshark/tcpdump, OSI model, defense-in-depth principles, SIEM platforms, MITRE ATT&CK, Cyber Kill Chain frameworks, DoD 8570/8140 IAT Level II, CSSP-A or CSSP-IR certification, DISA, DoD Cyber Security Service Providers (CSSP), Service Cyber Components, enterprise SIEMs/log aggregators, Splunk, Elastic, Sentinel, advanced threat actor TTPs, static/dynamic malware analysis, CJCSM 6510 incident reporting procedures, SANS GIAC, CASP+, CISSP","baseSalary":{"@type":"MonetaryAmount","currency":"USD","value":{"@type":"QuantitativeValue","minValue":87100,"maxValue":157450,"unitText":"YEAR"}}}]}