SOC Incident Response Lead at ASM Research

United States

<p>The SOC Incident Response Lead, serving as SOC Lead, is responsible for managing and coordinating the resolution of IT incidents and requests to ensure swift return to normal operations and minimize business impact. This role oversees the incident management process, ensures alignment with CASTLE-NET IT and Task Order goals, works closely with IT teams, stakeholders, and vendors to resolve incidents, communicates updates, and implements continuous improvement processes to enhance organizational resilience.</p> <h2>Key Responsibilities</h2> <ul> <li>Manage and coordinate the resolution of IT incidents and service requests from initial detection through closure</li> <li>Oversee incident escalation process ensuring alignment with SLAs and organizational priorities</li> <li>Coordinate incident response activities across IT teams, security teams, and external vendors</li> <li>Communicate incident status, impact assessments, and resolution timelines to stakeholders and leadership</li> <li>Lead root cause analysis activities to identify underlying causes of incidents</li> <li>Document all incidents in the incident management system with detailed information and resolution details</li> <li>Monitor incident response metrics including MTTR (Mean Time To Resolution) and SLA compliance</li> <li>Coordinate with cybersecurity team on security-related incidents and threat investigation</li> <li>Implement corrective actions to prevent incident recurrence</li> <li>Conduct post-incident reviews and develop lessons learned documentation</li> <li>Provide recommendations for ITSM system and process enhancements</li> <li>Mentor incident response team members and develop incident response procedures</li> </ul> <h2>Required Qualifications</h2> <ul> <li>Bachelor's degree in IT, Computer Science, Business Administration, or related field (or equivalent work experience)</li> <li>Minimum 8 years of experience in incident management, incident response, or related IT role</li> <li>Strong understanding of ITIL principles and incident management best practices</li> <li>Proficiency with incident management tools and ITSM platforms</li> <li>Excellent problem-solving, analytical, communication, and interpersonal skills</li> <li>Demonstrated ability to manage multiple incidents effectively and make sound technical decisions</li> <li>Experience with change management and process improvement initiatives</li> </ul> <h2>Preferred Qualifications</h2> <ul> <li>ITIL Foundation or ITIL Practitioner certification</li> <li>ITIL Specialist: Create, Deliver and Support or equivalent advanced ITIL certification</li> <li>Familiarity with CASTLE-NET IT environment and federal IT operations</li> <li>Experience with Security Operations Center (SOC) operations and incident response coordination</li> <li>Knowledge of cyber security incident response procedures and threat intelligence</li> <li>Background in federal IT contracting and compliance requirements</li> <li>Experience with ServiceNow or similar incident management platforms</li> </ul> <h2>Required Skills</h2> <ul> <li>Incident Management &amp; Response Coordination </li> <li>ITIL Framework &amp; Best Practices </li> <li>Problem-Solving &amp; Root Cause Analysis </li> <li>Stakeholder Communication &amp; Management </li> <li>Incident Tracking &amp; SLA Monitoring </li> </ul> <h2>Preferred Skills</h2> <ul> <li>Cybersecurity Incident Response </li> <li>Service Desk Management </li> <li>Process Improvement &amp; Optimization </li> <li>Team Leadership &amp; Mentoring </li> <li>Change Management &amp; CMDB </li> </ul> <strong><span>Qualifications</span></strong> <p><strong>Compensation Ranges</strong></p> <p>Compensation ranges for ASM Research positions vary depending on multiple factors; including but not limited to, location, skill set, level of education, certifications, client requirements, contract-specific affordability, government clearance and investigation level, and years of experience. The compensation displayed for this role is a general guideline based on these factors and is unique to each role. Monetary compensation is one component of ASM's overall compensation and benefits package for employees.</p> <p> </p> <p><strong>EEO Requirements</strong></p> <p>It is the policy of ASM that an individual's race, color, religion, sex, disability, age, sexual orientation or national origin are not and will not be considered in any personnel or management decisions. We affirm our commitment to these fundamental policies.</p> <p> </p> <p>All recruiting, hiring, training, and promoting for all job classifications is done without regard to race, color, religion, sex, disability, or age. All decisions on employment are made to abide by the principle of equal employment.</p> <p> </p> <p>Physical Requirements</p> <p>The physical requirements described in "Knowledge, Skills and Abilities" above are representative of those which must be met by an employee to successfully perform the primary functions of this job. (For example, "light office duties' or "lifting up to 50 pounds" or "some travel" required.) Reasonable accommodations may be made to enable individuals with qualifying disabilities, who are otherwise qualified, to perform the primary functions.</p> <p> </p> <p><strong>Disclaimer</strong></p> <p>The preceding job description has been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications required of employees assigned to this job.</p>