Cybersecurity Service Provider; CSSP Operations Team Lead

Cybersecurity Service Provider (CSSP) Operations Team Lead

Join to apply for the Cybersecurity Service Provider (CSSP) Operations Team Lead role at Computer World Services Corp. (CWS).

The Cybersecurity Service Provider (CSSP) 24/7 Operations Team Lead serves as the senior subject matter expert and operational leader responsible for directing continuous cybersecurity monitoring, event analysis, incident response, vulnerability management, and security infrastructure operations across all assigned classified and unclassified enclaves. The role oversees a 24/7/365 cyber operations team and ensures operational compliance with DoD, Defense Cyber Defense Command (DCDC), U.S. Cyber Command, DISA, and Zero Trust cybersecurity requirements.

The Team Lead provides daily supervision of technical staff, leads mission‑critical response operations, coordinates with senior Government stakeholders, and ensures the protection, detection, and defense of all Government IT assets in accordance with DoD cybersecurity policy frameworks.

• Operational Leadership
  • Lead, coordinate, and manage the 24/7 cyber operations team responsible for monitoring, detection, triage, and response across all network enclaves.
  • Serve as senior operational authority for active cyber events, incident escalation, and enterprise security actions.
  • Provide daily supervision, scheduling, and direction to CSSP operations staff in support of continuous monitoring requirements.
  • Maintain situational awareness of cyber threats, adversarial activity, and operational risk across the environment.
  • Provide expert‑level technical direction, strategic advice, and operational guidance for all CSSP mission areas.
  • Lead operational planning, milestone development, risk assessments, and major technical decisions.
  • Oversee complex or mission‑critical cybersecurity programs and ensure all technical requirements are met.
  • Interface with senior Government leadership for incident reporting, operational decisions, and program priorities.
  • Supervise junior staff and mentor technical team members.
• Continuous Monitoring & Event Analysis
  • Oversee 24/7 security event monitoring, log correlation, anomaly detection, and analysis of alerts.
  • Ensure rapid detection of threats involving malware, unauthorized access, data exfiltration, insider activity, and network exploitation.
  • Utilize SIEM platforms (e.g., Arc Sight) and IDS/IPS technologies for real‑time analysis.
• Incident Response & Reporting
  • Act as the central point of contact for Computer Emergency Response.
  • Lead incident investigations, containment, eradication, and recovery actions.
  • Provide internal and external incident reporting in accordance with DoD requirements.
  • Support DoD‑CERT and JFHQ‑DODIN direction during cyber events.
• Vulnerability & Patch Management
  • Operate and manage enterprise vulnerability scanning platforms (ACAS).
  • Conduct monthly scans, IAVA processing, remediation tracking, and POA&M development.
  • Perform STIG compliance checks and secure baseline validation.
• Security Infrastructure Support
  • Oversee the operation and maintenance of enterprise security technologies including IDS/IPS, Endpoint Security System (ESS), ACAS, network perimeter defense tools, traffic monitoring and forensic systems, penetration testing solutions, and SIEM tools.
  • Ensure performance, tuning, and configuration are optimized and aligned with Zero Trust architecture.
• Security Audits & Compliance
  • Perform audits on servers, workstations, network devices, and enclave infrastructure.
  • Ensure compliance with DoDI 8500.01, DoDI 8510.01, DoDD 8140.01, DISA STIGs, IAVA requirements, CJCSM 6510.01, JFHQ‑DODIN and U.S. Cyber Command directives.
  • Conduct Security Readiness Reviews (SRRs) and validate secure configurations.
• Cybersecurity Program Execution
  • Support the development and execution of a Cybersecurity Compliance Plan ensuring confidentiality, integrity, and availability (CIA) of Government systems.
  • Participate in continuous monitoring and scoring programs including CMRS, Cyber Threat Score, Cyber Top 10, etc.
• Documentation & Reporting
  • Develop and maintain POA&Ms, AORs, Security Override Letters, operational reports, incident summaries,…