Cybersecurity Lead

Job description:

Cybersecurity Lead

Location:

Germantown, MD, Oak Ridge, TN, or Chicago, IL

Employment Type:

Full Time

Management Solutions LLC (MSLLC) is an award-winning management consulting firm delivering solutions for our partners’ most complex challenges. Since 2002, we have supported federal and commercial clients through expertise in project and program strategy, delivery and implementation, engineering and technical advisory services, workforce solutions, and digital solutions.

We are distinguished by our reputation for managing mission-critical projects and helping organizations improve performance through innovative, people-centered solutions. MSLLC has been recognized as Small Business of the Year by the U.S. Small Business Administration, the Department of Energy, and Oak Ridge National Laboratory and has been named one of the Top Employers in the Greater Knoxville area.

At Management Solutions, we believe our people are the foundation of our success. We are committed to fostering a collaborative and caring culture where employees feel valued, supported, and empowered to grow. We seek professionals who think critically, solve complex problems, and are dedicated to building and sustaining a high-performing, people-centered organization.

The Cybersecurity Lead will serve as the primary technical and managerial authority overseeing all cybersecurity implementation support services. This role ensures the effective planning, execution, and monitoring of IT cybersecurity policy, operations, vulnerability management, and compliance across mission-critical systems. The Lead will coordinate with federal stakeholders and contractors to safeguard organizational assets and maintain resilience against evolving threats.

A Cybersecurity Lead will set strategic directions and oversight for the entire Assessment & Authorization and Vulnerability Management teams, including A&A Analysts, A&A Specialists, A&A SMEs, A&A Security Engineers, A&A Architects, Vulnerability Management Analysts, and Vulnerability Management Engineers to deliver the cyber authorization services. A Cybersecurity Lead will develop project management plans such as Work Breakdown Structure, mentor and guide team members on the preparation of technical deliverables and resolve project issues, prepare progress/status reports on technical deliverables, and monitor contractual requirements bringing in help from outside the project as needed to mitigate risks.

A Cybersecurity Lead will also serve as a primary interface for the client and ASM leadership to answer questions, address concerns, and provide status/updates. Additionally, a Cybersecurity Lead will have at least five years of working knowledge and experience with one or more of the following Federal security frameworks (FedRAMP, FISMA, Zero Trust Maturity Model, RMF, and NIST SP 800 series and NIST SP 800-53) and GRC tools (e.g. XACTA, Arch Angel, eMASS, CSAM).

A Cyber Security Lead is the manager of all SOC analysts and is the primary representative of the SOC to external stakeholders. The SOC Lead's primary responsibilities include managing the shift work analysts, developing training plans, developing and approving SLA monitoring solutions, ensuing ongoing analyst certification, conducting employee performance evaluations, and providing overall strategic direction for the SOC.

• Implement and oversee baseline security configurations and controls.
• Monitor and report on cybersecurity metrics, ensuring compliance with the client and federal requirements.
• Review and update processes to align with OIM guidance, policy, and best practices.
• Lead the implementation of the OIM cybersecurity metrics program plan, including data collection, reporting, and oversight.

• Direct daily cybersecurity operations for SC GSS domains, including detection, analysis, containment, eradication, and recovery.
• Manage SIEM, IDS/IPS, EDR, DLP, ICAM, CDM, and cloud security tools.
• Provide daily cyber health and status reports to leadership.
• Lead proactive threat hunting and incident response, coordinating with the client iJC
  3.
• Establish and maintain SOPs for incident response, escalation, and after-action reporting.
• Ensure compliance with US-CERT requirements, and federal directives.

• Oversee CDM program activities, including tool maintenance, upgrades, and analysis.
• Coordinate with contractors and vendors to ensure compliance with orders and regulations.
• Provide continuous monitoring for unauthorized hardware/software and applied risk controls.

• Lead vulnerability identification, risk assessment, and mitigation across IT infrastructure and cloud environments.
• Direct patch management, configuration updates, and corrective actions.
• Establish continuous monitoring processes leveraging automated tools and threat…