ENTERPRISE SECURITY OPERATIONS CENTER (ESOC) MANAGER

Req ID: 44367 
Team: T51 CYBERSECURITY 
Entity: Newport News Shipbuilding

US Citizenship Required for this Position: Yes 

Full-Time
Shift: 1st 
Relocation: No relocation assistance available 
Virtual/Telework Opportunity: Yes - Occasional or hybrid telework available 

Travel Requirement:  Yes, 10%-25% of the time 

Clearance Required: No - Clearance Not Required to Start 

 

Meet HII’s Newport News Shipbuilding
With more than 25,000 employees – including third-, fourth- and even fifth-generation shipbuilders – HII’s Newport News Shipbuilding (NNS) division is the largest industrial employer in Virginia. We’re the sole designer, builder and refueler of U.S. Navy nuclear aircraft carriers and one of two providers of U.S. Navy nuclear submarines. Our diverse and innovative team of professionals ranges from skilled trades to project managers, engineers and software developers to solution architects, technical subject matter experts, and system users. Anchored in our rich, 135-year history, we collaborate together at the forefront of technology, manufacturing, and integration of the most powerful and survivable naval ships in the world. Want to be part of the team? Apply today! We look forward to meeting you.

 

The Role

Designs, tests, and implements state-of-the-art secure operating systems, networks, and database products. Conducts risk assessment and provides recommendations for application design. Involved in a wide range of security issues including architectures, firewalls, electronic data traffic, and network access. Uses encryption technology, penetration and vulnerability analysis of various security technologies, and information technology security research. May prepare security reports to regulatory agencies.

 

The eSOC Manager leads and matures the company’s enterprise-wide Security Operations Center (SOC), providing centralized monitoring, detection, and incident response across the enterprise and its three divisional networks — including one that contains U-NNPI data regulated under NAVSEA 08 controls.
The position oversees cybersecurity operations for on-premises and hybrid cloud environments (including O365, Azure, and AWS) and ensures continuous (24x7x365) coverage and protection of corporate and U.S. Government information. This role requires balancing technical depth, operational leadership, and compliance rigor under DFARS 252.204-7012, CMMC 2.0, and NIST SP 800-171/800-53 frameworks.
The SOC Manager will direct the strategy of day-to-day security operations and cybersecurity engineering and appliance support efforts, coordinate enterprise incident response, manage SOC analysts and support engineers, and continuously evolve monitoring capabilities using automation, threat intelligence, and Zero Trust-aligned practices. The position reports to the Director of Cyber Operations / Deputy CISO and partners with the Enterprise CISO, divisional BISOs, Cyber Engineering, and Incident Response teams.

Must Have

Bachelor's Degree and 8 years of progressive technical experience in research, engineering and design; Master?s Degree and 6 years of relevant experience; PhD and 4 years of relevant experience

One of the following may be used as an equivalent to Bachelor's Degree for Information Technology Related Positions Only:

• NNS Apprentice School graduate
• Navy Nuclear Power School (NNPS) graduate
• Associate's Degree or other formal 2 year program and 2 years of relevant exempt experience or 4 years of relevant non-exempt experience
• Military Paygrade E-5 or above military experience
• High School/GED and 4 years combined of Manufacturing, Shipbuilding, Trades, Military experience or other relevant exempt experience
• High School/GED and 8 years combined of Manufacturing, Shipbuilding, Trades, Military experience or other relevant non-exempt experience
• A relevant professional certification can be substituted for a Bachelor's Degree.

Nice to Have

• Demonstrated success leading 24x7 operational teams and managing incident lifecycle activities.
• Strong knowledge of SIEM, SOAR, EDR/XDR, network IDS/IPS, DLP, and forensic tools.
• Proven experience operating under DFARS 252.204-7012, CMMC 2.0, and NIST 800-171, and NIST 800-53 requirements.
• Ability to translate technical issues into business and risk-based terms for executives.
• Bachelor’s degree in Computer Science, Information Assurance, or Cybersecurity (Master’s preferred).
• Certifications such as CISSP, CISM, GCIA, GCIH, GCED, or equivalent.
• Experience supporting multiple divisions or business units in a defense industrial base environment.
• Knowledge of U-NNPI handling and related NAVSEA 08 guidance.
• Familiarity with cloud-native security monitoring and global IR coor