SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
ID.me is seeking an experienced SOC Lead to lead security operations and incident response for a digital identity platform serving 152+ million users across federal, state, and healthcare organizations. This is a hands-on leadership role managing complex security incidents in cloud-native infrastructure, including Kubernetes clusters, containers, and CI/CD pipelines.
Key responsibilities include leading incident response investigations for compromised cloud workloads, conducting advanced forensic analysis, detecting and mitigating insider threats using tools like Chronicle, Splunk, EDR, and DLP systems. You will proactively hunt for threats, identify indicators of compromise and APT tactics, and lead SOC process improvement initiatives. The role requires mentoring junior SOC analysts, collaborating with Tier 2/3 teams, and maintaining expertise in GCP, Kubernetes, and cloud-native security risks.
You will leverage AI/ML tools to augment incident response and stay current with emerging cybersecurity trends and technologies. The position demands deep hands-on involvement in detection, classification, and reporting of security incidents while enhancing Standard Operating Procedures.
Required: 8+ years in information security with extensive incident response, threat hunting, and forensic analysis experience. 2+ years in a lead SOC role responding to sophisticated threats. 2+ years hands-on incident response in cloud environments. Working knowledge of container security (image scanning, runtime protection, escape scenarios) and CI/CD pipeline security (secrets exposure, build/deploy compromise, supply chain risks).
ID.me is a full-time, in-office culture with offices in McLean VA, Mountain View CA, NYC, and Tampa FL. This role is based in McLean and requires on-site presence five days per week.
