DMDC SOC Manager

Overview Security Operations Center (SOC) Manager Leidos is seeking an experienced cybersecurity operations leader to serve as the Security Operations Center (SOC) Manager supporting the Defense Manpower Data Center (DMDC) and the Defense Human Resources Activity (DHRA) within the Office of the Under Secretary of Defense for Personnel & Readiness (OUSD P&R). This Key Personnel position provides operational leadership for enterprise cyber defense supporting one of the Department of Defense's most critical information environments. DMDC maintains the Department's largest centralized repository of personnel, manpower, identity, readiness, pay, casualty, personnel security, entitlement, and financial information. The SOC Manager will lead the team responsible for protecting these mission-essential systems through continuous monitoring, cyber threat detection, incident response, and operational excellence. The selected candidate will provide leadership for Security Operations Center activities supporting a complex enterprise environment that includes approximately 15,000 network and endpoint devices, over 600 Government applications, approximately 100 Risk Management Framework (RMF) authorization boundaries, hybrid cloud environments, globally distributed infrastructure, and multiple cybersecurity service providers supporting worldwide operations. This role extends beyond daily SOC management. The SOC Manager serves as the operational leader responsible for establishing priorities, maturing cyber defense capabilities, improving operational processes, mentoring cybersecurity professionals, and ensuring Government leadership maintains timely awareness of significant cybersecurity events. Success in this position requires exceptional technical leadership, sound operational judgment, and the ability to lead high-performing teams in a mission-critical environment. Mission Environment The SOC Manager provides leadership supporting cybersecurity operations across a diverse enterprise consisting of: Approximately 15,000 network and endpoint devices. More than 600 Government-owned applications supporting DoD missions. Approximately 100 Risk Management Framework (RMF) authorization boundaries. Hybrid cloud environments including Oracle Cloud Infrastructure (OCI), Amazon Web Services (AWS), Software-as-a-Service (SaaS), and DISA-hosted capabilities. Worldwide enterprise infrastructure supporting personnel, identity, readiness, and mission support operations. Multiple Cybersecurity Service Providers (CSSPs) operating across the enterprise. Government and contractor-operated environments requiring close coordination between cybersecurity, IT operations, and mission stakeholders..

Provide overall leadership and operational management of the Security Operations Center (SOC). Lead, mentor, and develop a high-performing team of cybersecurity professionals responsible for continuous monitoring, cyber threat detection, incident analysis, and incident response. Direct enterprise cyber incident response activities, ensuring rapid detection, analysis, containment, eradication, recovery, and reporting of cybersecurity events. Serve as the primary operational interface with Government leadership for SOC activities, ensuring timely communication regarding operational status, emerging threats, and significant cybersecurity incidents. Develop, implement, and continuously improve SOC standard operating procedures, incident response playbooks, analyst workflows, and training programs. Establish operational priorities and performance metrics that improve SOC effectiveness, operational maturity, and analyst readiness. Coordinate cyber defense activities across Government organizations, contractor teams, and external Cybersecurity Service Providers (CSSPs). Oversee continuous monitoring of enterprise networks, endpoints, cloud environments, applications, and cybersecurity tools to identify and mitigate evolving threats. Provide