OverviewThe Cybersecurity Operations Lead, leads cybersecurity operations, security monitoring, incident response, and vulnerability management. This role works across cybersecurity, IT operations, and program management stakeholders to ensure security and administrative controls are documented, implemented, and evidenced in alignment with applicable federal requirements under the strategic oversight of the Agency CIO/PMO.
Responsibilities
- Monitor security events, logs, and alerts; coordinate triage, escalation, response, and remediation.
- Use SIEM and endpoint-security capabilities to correlate events and maintain situational awareness.
- Conduct vulnerability analysis, prioritize mitigation, and document closure evidence.
- Coordinate with system, network, Microsoft 365, and risk personnel on secure operations and reporting.
Qualifications
- 8 years in cybersecurity operations, incident response, or SOC environments.
- 5 years supporting federal cybersecurity programs.
- Experience with SIEM platforms, log analysis, and security event correlation.
- Experience conducting vulnerability analysis and applying security mitigations.
- CISSP certification or equivalent.
- Ability to perform overlapping cybersecurity functions in federal IT compliance environments (FISMA, FedRAMP, Zero Trust).
Citizenship and background investigation
- U.S. citizenship is required for personnel assigned to this contract.
- A role-appropriate, favorably adjudicated background investigation is required before work begins unless the Contracting Officer approves otherwise in writing; most roles require Tier 2.
Physical Demands: The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
- While performing the duties of this job, the employee is regularly required to talk or hear.
- Possess the ability to fulfill any and all office activities normally expected in an office setting, to include, but not limited to: remaining seated for periods of time to perform computer entry, participating in filing activity, lifting and carrying office supplies.
- The employee must occasionally lift and/or move up to fifteen (15) pounds.
- May require more than 40 hours per week to perform the essential duties of the position.
- Fine hand manipulation (keyboarding).
Work Environment: The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
- May work prolonged or irregular hours.
- Frequent local travel; occasional statewide or out-of-state travel.
- The noise level in the work environment is usually moderate.
- Exposure to general office conditions while conducting office duties.
