Security Operations Center Chief

Overview

CVP is an award-winning healthcare and next-gen technology consulting firm recognized for excellence and innovation in the solutions we have provided our clients across healthcare, national security, and the public sector.

 

We are seeking a Security Operations Center Chief to join our team is to transition a large federal agency from Cybersecurity Services model to a Managed Cybersecurity Services model to safeguard their critical infrastructure. This SOC Chief, will use their expertise to ensure the Cybersecurity Support Services will reduce exposure to cyber risk, ensure priority response and recovery to cyber threats/incidents, maintain shared situational awareness of cyber threats, vulnerability, and incidents and use trustworthy cyber protocols, products, services, configurations and architectures. 

Responsibilities

• Perform all aspects of CSS services for existing and future automated cybersecurity information systems and tools to include, at a minimum: Analyze the overall effectiveness of cybersecurity hardware and software infrastructure supporting information systems and web programs. 
• Review and evaluate government and commercial sector information system and web technology cybersecurity hardware and software trends. 
• Provide NSOC operations support by monitoring and analyzing network traffic and responding to complex technical security issues. Conduct vulnerability assessments and security incident investigation. Develop, research, and maintain proficiency in tools, techniques, countermeasures, and trends in computer networking. 
• Provides subject matter expertise (SME) in applying and implementing the NIST Risk Management Framework and ensure NIST compliance in support of the Cybersecurity Program. 
• Serves as the principal advisor to the Chief Information Officer (CIO) / Chief Information Security Officer (CISO) / Deputy Chief Information Security Officer (DCISO), Information System Owner (SO), Business Owner, and on all matters, technical and otherwise, involving the security of an information system. 
• Provides SME in meeting the requirements of the Federal Information Security Modernization Act (FISMA) and all OMB/CISA directives in accordance with NIST guidance. 
• Conducts and document continuous monitoring and scanning of cloud and on-premises systems. 
• Provides support to the Federal Chief Information Security Officer (CISO) to deliver requisite audit support services to comply with federal, industrial, and organizational regulations and standards. 
• Provides vulnerability and POA&M management across FCC networks and projects 
• Manage and maintain the cybersecurity training requirements as defined by OMB A-130, applicable NIST guidance and FCC policies 
• Provide strategic guidance, recommendations, planning, and improvements to the Cyber Security Program. 
• Develop, update, and maintain required IT security documentation including, directives, policies, standard operating procedures (SOPs) and advisories to support the OCIO in its mission of providing IT services to the enterprise. 
• Transition to EIS Contract Vehicle
• Support the migration of Managed Prevention Service (MPS), Vulnerability Scanning Service (VSS), Incident Response Service (INRS), and Trusted Internet Connections Service (TICS) to the EIS contract vehicle during option period. 

Qualifications

• Active Top Secret Clearance
• 7+ years of experience in SOC operations and incident response including SOC management and an IR commander role.
• Core competencies in leading Information Security GAP Analysis review. and cyber security operations and incident response.
• Possess the knowledge, skills, tasks, and capabilities described in the NICE Work Roles for Incident Response (PD-WRL-003), Insider Threat Analysis (PD-WRL-005), and Threat Analysis (PD-WRL-006) as outlined in the NICE Work Role Framework.
• Certified Information Systems Security Professional (CISSP)/ CISMGIAC Incident Response Certification./ any one of GIAC Enterprise Incident Response (GEIR), GIAC Cloud Forensics Responder (GCFR), GIAC Certified Forensic Analyst (GCFA), GIAC Network Forensic Analyst (GNFA), GIAC Certified Incident Handler (GCIH), GIAC Experienced Forensics Analyst (GX-FA), or GIAC Linux Incident Responder (GLIR). GIAC Security Operations Manageror any one of GIAC certification (within 150 of award) and
• Must have Microsoft Certified Security Operations Analyst Associate to demonstrate expertise in both Microsoft solutions and vendor agnostic SOC processes.

Location: Washington, DC (On-site position)

 

Salary: $165,000-175,000 

 

Please note this role is pending program award. 

 

About CVP