Cyber Focused Operations Lead

Cyber Focused Operations Lead

Job Category: Information Technology

Time Type: Full time

Minimum Clearance Required to Start: TS/SCI

Employee Type: Regular

Percentage of Travel Required: Up to 10%

Type of Travel: Local

* * *

The Opportunity:

The Cybersecurity Focused Operations Lead will directly report to the Branch Chief of Defensive Cyber Operations. The candidate will leverage previous experience within cybersecurity operations, hunt/blue teams, red teams, and threat intelligence to achieve strategic goals by executing policies and procedures at a tactical level that best align with strategic direction given by the Chief of TCS Cyber.

The Focused Operations Lead will oversee the day-to-day execution of all teams aligned to the subordinate organization. This includes identifying opportunities to mature processes and personnel with the intent to execute the mission effectively and efficiently. When appropriate, the Lead will provide guidance and recommendations to leadership on matters relating to the prioritization of resources. As a result, the Focused Operations Lead will be required to effectively work with and communicate with various levels of stakeholders, including TCS leadership, technical customers, non-technical customers, and all TCS staff of varying skillsets and experience.

Responsibilities:

● Execute the mission of TCS Cyber Focused Operations. This requires the coordination of Threat Intelligence, Hunt, Adversarial Threat Emulations, and Defensive Countermeasures development.

● Continue to mature and integrate all capabilities into a unified workflow, or Fusion Cell, following a predetermined model.

● Work with the Lead of the Security Operations Center (SOC) to define and integrate specific workflows into the Fusion Cell where appropriate.

● Assist both the Branch Chief of Defensive Cyber Operations and Chief of TCS Cyber with the design, development, implementation, operations, and sustainment of cybersecurity services that enhance the cybersecurity posture of NGA Programs, Systems, and the Enterprise.

● When required, conduct research and analysis to assist with solution design and implementation planning for the modernization of existing cybersecurity solutions and infrastructures in partnership with internal and external stakeholders.

● Assist with monitoring the performance and morale of staff across the Cybersecurity Division by providing recommended courses of action to resolve issues to TCS leadership.

● As needed, provide guidance or direction to lower-level staff.

● Assist with the research and evaluation of new concepts, processes, and technology to improve performance and gain efficiencies within Focused Operations.

Qualifications:
Required: 

● Candidate must have a TS/SCI with ability to obtain a Polygraph.

● Demonstrated leadership experience serving in positions such as functional manager or team lead for a minimum of 3 years.

● Sufficient knowledge of complex enterprise cybersecurity systems and technologies with the ability to interpret network and web architecture documentation.

● Demonstrated experience providing briefings to an executive audience.

● Certified DoD 8140.01 and 8570.01-M Information Assurance Technical Officer (IAT) Level III.

● Certified DoD 8140.01 and 8570.01-M CSSP Analyst.

● Understanding of the Security Operations Capability Maturity Model(s) (SOC-CMM, C2M2, or equivalents) to secure information systems.

● Demonstrated experience with ODNI ICS 500-27, NSM-8, and OMB M21-31.

● Understanding of cybersecurity compliance policy, programs, processes, and metrics.

● Excellent verbal and writing skills.

● Good understanding of project management concepts such as ITIL and the differences between Iterative versus Waterfall methodologies.

● Demonstrated experience in cybersecurity design, engineering and operations with emphasis on NGA capabilities.

● Strong understanding of adversarial tactics and techniques as they apply to offensive cyber operations.

● Strong understanding of the Intelligence Lifecycle and how it applies to Cyber Threat Intelligence reporting.

● Strong understanding of the various methodologies that can be leveraged to conduct Hunt operations.

-

________________________________________________________________________________________

What You Can Expect:

 

A culture of integrity.

At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performi