Technical/Management Lead

Overview

Edgewater Federal Solutions is currently seeking a Fusion Technical and Management Lead to provide leadership, management and support to Cyber Security Operations Centers - comprised of combined Tier 2 and Tier 3 technical specialists for Edgewater Federal government contracts.

Responsibilities

• Lead, manage and coordinate the response for confirmed security incidents, to include efforts to contain, remediate, recover, and prevent
• Provide overall leadership, management, work assignment, organization, and administrative duties for a combined team of Tier 2 and Tier 3 cyber security specialists
• Support the production of effective situational awareness products with relevant metrics and visualizations for key constituents and leadership
• Provide subject matter expertise in the areas of cyber risk, security architecture and incident response activities to leadership.
• Provide oversight for 24x7x365 Security Operations Center (SOC) providing threat hunting, forensics, incident response, threat intelligence, crisis response, and red team activities
• Provide leadership to the digital forensics & incident response team supporting full incident response lifecycle for all cyber security incidents.
• Ensure all incident related US-CERT and FISMA federal reporting requirements are met and track customer Service Level Agreements.
• Support IT Operation teams to ensure network and system architecture changes meet security best practices and NIST guidelines.
• Perform cyber security policy development review in support of the Information Security Program and CISO to ensure all federal mandates are defined and enforced by policy.
• Lead remediation activities in the support of multiple federal audits.
• Maintain situational awareness and keep current with cyber security news and threat actor Tactics, Techniques, and Procedures (TTPs).
• Monitor, triage, and prioritize events, alerts, and tips for further investigation
• Investigate events, alerts, and tips to determine if an incident has occurred.
• Act as incident commander for significant incidents related to Advanced Persistent Threat (APT) actors targeting

Qualifications

• Bachelor’s Degree in relevant field and 12 years IT experience or equivalent combination of education/training and technical experience in the IT field directly related to the required area of expertise in cyber security  
• In lieu of a degree, relevant experience is applicable
• U.S. Citizenship is required per contract to obtain and maintain a U.S. Security clearance.
• 5 years of Tier 2/3 CSOC leadership and management
• Ability to perform Cyber Threat Hunts by identifying patterns and anomalies in data
• Ability to Create Threat Models to better understand the Enterprise, identify defensive gaps, and prioritize mitigations.
• Experience utilizing Threat Intelligence and Threat Models to create threat hypotheses and plan and scope Threat Hunt Missions to verify threat hypotheses.
• Ability to pass a security clearance background investigation  
• Knowledge and experience using an incident response framework and processes
• Experience and advanced knowledge of Ticket management tools and practices; troubleshooting; investigations; computer networking; and operating systems
• Understand the risks Government Agencies face and how to use the investigative and analytical aptitude to derive solutions that will mitigate these risks and ensure compliance.
• High technical ability/aptitude, demonstrated through prior technical experience and accomplishment
• Experience in applying security controls and measures to various technologies and systems
• Critical thinking, analytic skills, and experience
• Experience with forensic analysis of disk images and network traffic
• Previous experience in research or the collection of data driven information
• Ability to work on occasional weekends and holidays 
• Experience in a rapid paced, time sensitive, high-quality environment. 
• Exhibit considerable client delivery, business development, and proposal development experience.
• Strong management, teamwork, and interpersonal skills against difficult due dates and timelines.
• Strong customer service focus to meet the needs of internal and external customers.

Desired Elements:

• One or more certifications in information security (such as CISSP, CISM, CompTIA Advanced Security Practitioner, CompTIA Security Analytics Expert, CCTHP, CySA+, Security+, etc.)
• Project Management Certifications (such as CAPM, PMP, ITIL etc.) 
• Experience in a fast-paced cyber security operational environment  
• Current Security clearance