Director, Cyber Operations

Job Description Everforth ECS is seeking a Director, Cyber Operations to join our team in Arlington, VA (Hybrid).

Position Overview Everforth ECS is seeking an experienced cyber operations leader to support the TESS program and advance cyber operations opportunities across the ECS CISA account.

Within TESS, this individual will engage senior federal leaders, identify operational challenges, and help customers understand how their cyber defense capabilities connect to achieve broader mission outcomes. They will build trusted relationships across the customer organization, facilitate alignment among stakeholders, and lead a team of cyber mission operations and cyber solutions subject matter experts in translating mission needs into actionable recommendations and solutions that improves the effectiveness and efficiencies of CISA’s cyber capabilities.

The ideal candidate has progressed from practical cybersecurity operations (Sec Ops/SOC) into senior cybersecurity leadership, including leading leaders, subject matter and cyber mission experts, and multidisciplinary teams. They understand how large-scale cybersecurity operations, cyber threat intelligence, incident response, threat hunting, vulnerability management, and supporting technologies work together to improve cyber defense effectiveness and efficiency of Sec Ops and SOC teams. They have led teams responsible for designing, implementing, and advancing cyber Sec Ops/SOC capabilities and solutions, while improving how organizations and teams collaborate and operate across organizational boundaries, processes, and competing priorities.
This leader will use operational credibility and mission, customer, delivery leadership, and ECS executive relationships to build customer demand and support for improvements and move initiatives forward. Leader will also collaborate with and lead solutions architects, engineering specialists, and other technical experts will support detailed solution  addition to TESS responsibilities, this individual will contribute cyber operations expertise, customer insight, and strategic guidance to related pursuits and emerging opportunities across the ECS CISA account.

Key Responsibilities Engage federal leadership and build trust. Establish and sustain relationships with senior government leaders and mission stakeholders. Lead substantive conversations about operational priorities, capability gaps, dependencies, and desired outcomes.

Connect cyber operations capabilities. Help customer leaders understand the relationships among cyber defense functions, teams, services, and technologies. Identify where stronger integration, shared information, or coordinated processes can improve mission effectiveness.

Uncover underlying cyber mission problems. Look beyond individual requests to understand root causes, organizational barriers, and cross-functional challenges. Translate customer discussions into clearly defined problems, priorities, and opportunities for improvement.

Build alignment and customer commitment. Use trusted relationships, operational experience, and clear communication to bring stakeholders together around recommended approaches. Help customers evaluate tradeoffs, resolve competing priorities, and establish support for next steps.

Lead a team of cyber mission operations and solution subject matter experts. Set priorities, provide direction, develop talent, and hold SMEs and team leads accountable for quality and results. Coordinate expertise across disciplines to address customer needs.

Guide solution development. Bring customer insights back to TESS program leadership, solutions architects, capability leads, and technical teams. Lead the development of mission-focused recommendations, supported by specialists responsible for detailed architecture and engineering.

Translate strategy into program action. Work with TESS leadership and delivery teams to develop concepts of operations, capability roadmaps, requirements, staffing recommendations, and implementation priorities. Keep recommendations grounded in customer needs and program execution realities.

Advance operational improvements. Help move approved initiatives into execution by addressing stakeholder concerns, adoption barriers, and dependencies. Establish meaningful measures of progress and mission impact with customer and program leaders.

Support CISA account pursuits. Contribute cyber operations expertise to related opportunities, including customer discovery, opportunity assessment,…