[Hiring] Security Operations Manager @ECS Tech Inc

Role Description

Everforth ECS is seeking a Security Operations Manager to work remotely. This position is contingent upon contract award.

The Security Operations Manager will be the single POC providing ongoing status and progress to the NIAID CO and COR. In this role, you will be responsible for:

• Cybersecurity incident resolution, including investigation and response to minimize the impact or likelihood of incidents.
• Monitoring of NIAID systems and components to detect potential threats.
• Project management and engineering support for the improvement and automation of security operations tools and processes.
• Project support for improving and automating security operations capabilities, including:
• Developing solutions and options for project milestones.
• Developing project plans in a task and completion tracking tool such as Jira.
• Reporting on progress in real-time using an IT Service Management tool such as ServiceNow.
• Responding to and resolving security and privacy incidents and coordinating with the NIH Threat Management and Incident Response (TMIR) team and privacy coordinators according to NIH or Federal format and timelines.
• Advising and assisting with SOC architecture activities for all SOC information systems initiatives supporting all SOC tools and capabilities.

Salary Range: $150,000 - $190,000

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, or related field.
• Active Public Trust or higher security clearance.
• Minimum of 10 years of experience in cybersecurity; 15 years’ experience preferred.
• 8+ years’ experience leading and delivering in security operations programs and incident management for comparably sized federal agencies and security programs.
• Shall have at least one of the following industry-recognized certifications:
• Certified Information System Security Professional (CISSP)
• Global Information Assurance Certification (GIAC)
• Certified Enterprise Defender (GCED)
• GIAC Certified Incident Handler (GCIH)
• Certified Network Defender (CND)
• Systems Security Certified Practitioner (SSCP)
• Proven ability to understand threats, evaluate the impact of potential incidents, and recommend risk reduction techniques.
• Demonstrated expertise in analyzing and providing clear and concise risk reports, dashboards, and other visualizations to federal risk executives, system operators, and system stakeholders.
• Knowledge of and experience overseeing the administration and configuration of security tools.
• Experience with enterprise-wide penetration testing remediation to comply with agency remediation standards.
• Documented experience in monitoring an enterprise-wide environment for potential security incidents.
• Experience in establishing and enhancing security operations capabilities and proactively identifying potential risks.
• Experience in setting up, administering, and enhancing cybersecurity tools and security operations processes.
• Knowledge of different operational threat environments and incident categories.
• Reside within the Washington DC Metro area.
• Travel within the Washington DC Metro Area, and CONUS as needed.

Requirements

• Cybersecurity incident resolution.
• Monitoring of systems for potential threats.
• Project management and engineering support.
• Coordination with NIH TMIR team and privacy coordinators.
• Advising on SOC architecture activities.

Benefits

• General Description of Benefits