Cybersecurity Lead

Cybersecurity Performance Management

Implement and oversee baseline security configurations and controls.

Monitor and report on cybersecurity metrics, ensuring compliance with the client and federal requirements.

Review and update processes to align with OIM guidance, policy, and best practices.

Lead the implementation of the OIM cybersecurity metrics program plan, including data collection, reporting, and oversight.

Cybersecurity Operations

Direct daily cybersecurity operations for SC GSS domains, including detection, analysis, containment, eradication, and recovery.

Manage SIEM, IDS/IPS, EDR, DLP, ICAM, CDM, and cloud security tools.

Provide daily cyber health and status reports to leadership.

Lead proactive threat hunting and incident response, coordinating with the client iJC3.

Establish and maintain SOPs for incident response, escalation, and after-action reporting.

Ensure compliance with US-CERT requirements, and federal directives.

Vulnerability Management and Mitigation

Lead vulnerability identification, risk assessment, and mitigation across IT infrastructure and cloud environments.

Direct patch management, configuration updates, and corrective actions.

Establish continuous monitoring processes leveraging automated tools and threat intelligence feeds.

Ensure compliance with FISMA, NIST 800-53, and evolving regulatory requirements.

Deliver regular vulnerability management reports with metrics, compliance status, and recommendations.

Required Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, or related field (Master’s preferred).
• 8+ years of progressive experience in cybersecurity operations, incident response, and vulnerability management.
• Strong knowledge of federal cybersecurity policies, federal directives, and industry best practices.
• Hands-on expertise with SIEM, IDS/IPS, EDR, DLP, ICAM, CDM, and cloud security platforms.
• Proven leadership in managing cross-functional teams.
• NIST 800-53 Rev 5
• Risk Management Framework
• NIST Cybersecurity Framework (CSF)
• FedRAMP Authorization
• Tenable Nessus (ACAS)
• DISA STIGs

Preferred Qualifications

• Strategic thinker with ability to align cybersecurity initiatives to mission priorities.
• Excellent communication skills for reporting to leadership and coordinating with stakeholders.
• Strong analytical and problem-solving skills, especially in incident response and forensic analysis.
• Ability to adapt to emerging technologies and evolving threat landscapes.
• Able to build advanced alerts in SIEM.
• Team leader with capability to train basic and advanced skills.
• Able to translate events into incident response ticket with full information for SOC lead and provide briefings to leadership.
• Advanced knowledge of security tools.
• Able to assist Tier 2 and Tier 3 Analyst in incident response.
• Has above basic Window and Linux CLI skills.
• Has built understanding of multiple security tools i.e. EDR, IDP, IDS, Firewalls, etc.
• Has built full incident response and provides mitigation steps.
• Leads and writes Tabletop Exercises.
• Certifications such as CISSP, CISM, CEH, or equivalent.
• GIAC Certified Intrusion Analyst (GCIA)
• GIAC Certified Incident Handler (GCIH)
• Certified Information System Security Professional or Associate (CISSP or Associate)
• Certified Information Systems Auditor (CISA)
• Project Management Professional (PMP)
• Certified Associate in Project Management (CAPM)