Jobs in Loudoun County, VA

About the role

Agile Defense is currently seeking a highly technical, hands-on Cybersecurity Operations Center (CSOC) Lead and Deputy Program Manager with advanced skillsets in cyber security, to develop and operate cyber security capabilities for a variety of federal customers. Candidates should have excellent written and oral communication skills, be able to work independently and as part of a team, with demonstrated leadership capabilities. Skills and experience in Cyber Operations, Security Event Analysis, Incident Response, Cyber Hunt, Forensics, Malware Analysis, and Cyber Threat Intelligence (skills in more than one cyber discipline are preferred) are required for this position. The ideal candidate will have hands-on experience supporting a 24x7x365 CSOC environment as an analyst or engineer, experience as a technical team lead within the SOC, and operations management experience. A solid understanding of cyber threats and information security in the domains of TTP’s, Threat Actors, Campaigns, and Observables. Additionally, the ideal candidate would be familiar with intrusion detection systems, intrusion analysis, security information event management platforms, endpoint threat detection tools, and security operations ticket management. Corporate duties such as solution/proposal development, corporate culture development, mentoring employees, supporting recruiting efforts, will also be required. Position is contingent on successfully completing a program-based background investigation.

What you'll bring

• Required Certification(s): CISSP or CISSP-ISSMP or CISM or PMP
• Candidates will have a minimum of 5 years of direct operational and program management experience in delivery of Cybersecurity program or related projects.
• Candidates will have a minimum of seven (7) years of professional experience with a solid understanding of incident response, insider threat investigations, digital forensics, and cyber threats.
• A minimum of five (5) years of hands-on experience with experience in the last two (2) years that includes host-based and network-based security monitoring, identifying and analyzing anomalous activities with familiarity in insider threat monitoring software, host-based forensic tools, intrusion detection systems, intrusion analysis functions, security information event management (SIEM) platforms, endpoint detection and response tools, security operations ticket management.
• Education, Background, and Years of Experience
• Bachelor’s degree in computer science, engineering, STEM or cybersecurity
• The ability to create insider threat focused dashboards, reports and workflow diagrams.
• Experience collecting data, chain of custody and reporting results
• handling and escalating security issues or emergency situations appropriately
• providing incident response capabilities to isolate and mitigate threats to maintain confidentiality, integrity, and availability for protected data.
• Experience with mentoring junior members in an open collaborative environment.
• One of the following GCFA, GREM, GCIH, OSCP, GPEN, GFCE or equivalent preferred.

Locations