IT Manager - Security Operations

Job Title: IT Manager – Security Operations

Location: Herndon, VA 

Citizenship: US Citizen

Security Clearance: Must be eligible to OBTAIN a Secret Clearance

AttainX, Inc. is in search of an IT Manager for Security Operations who actively engineers’ resilience into the infrastructure while rapidly responding to threats. This leader thrives at the intersection of legacy infrastructure and next-gen cloud modernization, equipped with deep technical acuity and the operational maturity to harden, transform, and future-proof the enterprise systems.

Qualifications and Education Requirements:

Basic Qualifications:

• 8+ years in IT infrastructure, cybersecurity operations, and secure enterprise transformation.
• Operational experience in both cloud-based and on-prem environments (hybrid architecture expertise required).
• Proven leadership in incident response, malware reverse engineering, and PowerShell command analysis.
• Direct implementation experience with segmented cloud architectures and domain-based data isolation.
• Familiarity with EDR/MDR platforms (Sophos, SentinelOne, CrowdStrike), Defender ATP, Sysmon, and log correlation engines.
• Fluency in MITRE ATT&CK, TTP mapping, and adversarial emulation frameworks.

Preferred Qualifications:

• Preferred to possess at least one (1) of the following certifications: CISSP, CISM, GCFA, CEH, AWS/GCP/Azure Security, CCSP
• Familiarity with Zero Trust frameworks and DevSecOps toolchains

Duties:

Cyber Defense Operations

• Lead end-to-end monitoring and triage of Defender ATP, EDR, and MDR alerts across enterprise systems and VPC environments.
• Direct incident containment involving active malware threats, PowerShell exploitation, and reverse shell activity.
• Correlate MITRE ATT&CK aligned TTPs with telemetry data to isolate lateral movement vectors.
• Execute system-wide quarantine protocols and containment of remote access backdoors even in environments lacking initial event solutions.

Enterprise Security Architecture & Recovery

• Oversee forensic reconstruction of incidents using logs from Enterprise Systems 
• Drive remediation playbooks including password resets, admin access audits, and VPN access restrictions.
• Lead integration of RBAC, MFA enforcement, and credential hygiene across cloud and on-prem domains.

Segmented Cloud Deployment & Data Partitioning

• Architect secure, micro-segmented cloud environments (e.g., AWS GovCloud, Azure IL) to enforce tenant-level separation and data sovereignty.
• Implement domain-based data partitioning strategies to enable cross-domain integration while maintaining enclave integrity.
• Modernize application infrastructure through containerized workloads, secured APIs, and tiered access models that align with evolving mission data boundaries.

Modernization of Legacy Applications

• Engineer Zero Trust overlays on legacy on-prem systems to create hardened perimeterless architectures.
• Align modernization efforts with STIG/RMF compliance frameworks and security-by-design principles.

Governance, Reporting & Stakeholder Engagement

• Develop root cause analysis (RCA), risk heatmaps, and executive-level reporting to support continuous improvement and awareness.
• Coordinate across security, infrastructure, and application teams to unify cyber defense and modernization priorities.
• Lead post-incident technical debriefs, tabletop exercises, and stakeholder briefings.

Governance, Reporting & Stakeholder Engagement

• Execution Methodology: Agile-adapted operations, STIG-driven enforcement, and continuous telemetry-based optimization

About Us

AttainX Inc. is SBA Certified 8(a), Women Owned Small Business (WOSB), Economically Disadvantaged WOSB (EDWOSB), CMMI Level 3, ISO 9001:2015 certified QMS and Silver Level SaFe Partner. For more than 12 years, AttainX, Inc. has delivered