Experience Inc. Jobs

Cybersecurity Operations Manager

Alexandria, VA, USA ● Seaside, CA, USA Req #815

Wednesday, January 22, 2025

ASRC Federal is a leading government contractor furthering missions in space, public health and defense. As an Alaska Native owned corporation, our work helps secure an enduring future for our shareholders. Join our team and discover why we are atop veteran employer (https://www.asrcfederal.com/asrc-federal-earns-military-times-best-for-vets-and-military-com-top-25-veteran-employer-honors/) andCertified Great Place to Work™ (https://www.asrcfederal.com/asrc-federal-receives-great-place-to-work-certification-for-2024/)

ASRC Federal NetCentric Technology seeks an on-site Cybersecurity Operations Manager in Seaside, California or Alexandria, Virginia to support one of our Department of Defense (DoD) Cybersecurity Support Services contracts. This position will perform activities related to leading and coordinating cybersecurity operations primarily responsible for monitoring, detecting, containing, responding to, and eradicating threats and other malicious activity. This position will help build and streamline DOD Information Network (DoDIN) Operations, Security Operation Center (SOC) and incident response team activities while synchronizing cyber threat hunting actions within the environment. This position will require support to respond to and investigate cyber events when an incident occur after regular business hours at both Alexandria, Virginia and Seaside, California.

Key Responsibilities:

• Strategic Planning and Oversight: Develop and implement strategic plans for cybersecurity operations, ensuring alignment with organizational goals and compliance with DoDIN requirements. Oversee the overall operations of the cybersecurity center encompassing operations, incident response and threat hunting, including resource allocation and performance monitoring.

• Act as the primary point of contact for DoDIN, SOC, Hunt operations and all major security incidents which includes tracking taskings, incidents, corrective measures taken, recommendations, and remediation activities; completing incident reports for investigations as needed; providing or contributing to weekly report of events and incidents.

• Team Leadership and Management: Provide guidance, mentorship, and support to team members, fostering a collaborative and efficient work environment.

• Incident Management and Response: Direct and coordinate incident response activities, ensuring timely detection, analysis, and mitigation of security incidents. Develop and implement incident response plans, procedures (SOPs), and process flows and oversee their execution during security events to include but not limited to tabletop exercises.

• Threat Hunting and Proactive Security: Oversee cyber threat hunting activities to proactively identify and mitigate potential threats within the organization's network. Ensure that threat hunters use advanced techniques and tools to detect hidden threats that automated systems might miss.

• SIEM Maintenance and Monitoring: Provide oversight to the maintenance and monitoring of the SIEM (Splunk) system, ensuring its effective operation and integration with other security tools. Regularly review and analyze SIEM data to identify trends, anomalies, and potential security issues while communicating with administrators and engineers on the necessary tuning and optimization of data to make informed decisions.

• Communication: Serve as the primary point of contact for DoDIN, SOC operations, Incident Response and Hunt activities, communicating with stakeholders such as senior management (technical and non-technical), cross-functional teams and external partners. Provide regular reports to program leadership, DoD officials, and other stakeholders on the status of security incidents, lessons learned, and the effectiveness of response strategies.

• Compliance: Provide expert guidance on compliance with cybersecurity directives, ensuring the DoD program meets all required security controls and risk management policies.

• Continuous Process Improvement: Regularly review and update processes and procedures (SOP) based on new threats and lessons learned from past incidents in accordance with CJCSM 6510.01B, NIST SP 800-61R2, DoD regulations, and industry best practices.

Preferred Skills:

• Hands-on knowledge and experience with cybersecurity tools such as Splunk, Tanium, Beyond Trust, ACAS, ESS or Microsoft Defender.

Required Qualifications:

• Bachelor’s degree in Cybersecurity, Information Technology, or a related field (or equivalent additional experience).

• Active DoD Secret Clearance with the ability to obtain and maintain a Top-Secret Clearance.

• Active DoD 8570 IAT Level II certification or greater , including at least one of the following certifications in good standing: CCNA Security, CySA+, GICSP, GSEC, Security+ CE, CND, SSCP, CASP+CE, CCNP Security, CISA, CISSP (or Associate), GCED, GCIH, or CCSP.

• Active DoD 8570 CSSP Incident Responder certification a plus, including at least one of the following certifications in good standing: CEH, CFR, CCNA Cyber Ops, CHFI, CySA+, GCFA, GCIH, SCYBER, or PenTest+.

• Experience leading teams within a DoD Cybersecurity Operations Center environment.

• Experience with DoDIN Operations directives, task order process and procedures.

• Knowledge of Incident Response Handling Procedures (NIST SP 800-61)

• Familiarity with cyber adversary tactics and frameworks (such as ATT&CK and D3FEND).

• 10+ years of related information technology and cybersecurity experience with 3+ years CIRT experience and one year of CIRT lead experience.

• On-site in Seaside, California or Alexandria, Virginia.

We invest in the lives of our employees, both in and out of the workplace, by providing competitive pay and benefits packages. This position is offering a pay range of $130,000.00 - $185,000.00 depending on experience, seniority, geographic locations, and other factors permitted by law. Benefits offered may include healthcare, dental, vision, life insurance; 401(k); education assistance; paid time off including PTO, holidays, and any other paid leave required by law.

Advantages of Working at ASRC Federal:

• Learning and Development: After 90 days of employment, regular full-time employees are eligible for our professional development program. This includes annual funding for:

• Pursuing Associate’s, Bachelor’s, or Graduate Degrees.

• Obtaining industry-standard professional certifications.

• Participating in professional certificate programs.

• Covering registration fees for professional conferences.

• Employee Resource Groups (ERGs): Engage with colleagues through our ERGs, which foster networking and collaboration among individuals with shared interests, backgrounds, and experiences. Our ERGs include:

• Women’s Impact Network (WIN).

• Multicultural ERG.

• Military Community (MILCOM).

• Pride ERG for LGBTQ+ employees and allies.

• Purpose-Driven Careers: Join a company recognized as a:

• Certified Great Place to Work .

• Military Times’ Best for Vets Employer.

• Military.com’s Top 25 Veteran Employer .

Comprehensive Benefits:

• Insurance Coverage : Comprehensive plans for medical, dental, vision, life insurance, and short-term/long-term disability.

• Paid Leave : Inclusive policies for bereavement, military obligations, and parental needs, along with 11 paid holidays annually.

• Retirement Savings : A 401(k) plan with a generous company match and immediate vesting to help secure your financial future.

• Incentives : Employee referral bonuses to reward you for helping grow the ASRC Federal Family

Embark on a career with ASRC Federal, where your growth, purpose, and well-being are at the forefront of what we do.

We invest in the lives of our employees, both in and out of the workplace, by providing competitive pay and benefits packages. Benefits offered may include health care, dental, vision, life insurance; 401(k); education assistance; paid time off including PTO, holidays, and any other paid leave required by law.

EEO Statement

ASRC Federal and its Subsidiaries are Equal Opportunity /Affirmative Action employers. All qualified applicants will receive consideration for employment without regard to race, gender, color, age, sexual orientation, gender identification, national origin, religion, marital status, ancestry, citizenship, disability, protected veteran status, or any other factor prohibited by applicable law.

Other details

• Job FamilyInformation Technology

• Job Sub-FamilyCyber Security

• Pay TypeSalary

• Alexandria, VA, USA

• Seaside, CA, USA

<