CACI International

Cybersecurity Focused Operations Lead

CACI International Springfield, Virginia, United States · $104K–$218K/yr

Defense and Space Manufacturing · 10,001+ employees

19 h ago
security Principal (10+ yrs) Full-time United States
Create a free account to apply — email only, no card. You can also save this posting or score it against your profile with AI.

About the role

The Cybersecurity Focused Operations Lead oversees the day-to-day execution of defensive cyber operations, including threat intelligence, hunt teams, and adversarial threat emulation. They are responsible for maturing processes, integrating capabilities into a unified workflow, and providing strategic guidance to leadership regarding resource prioritization.

What they look for

Cybersecurity operations Threat intelligence Defensive countermeasure development Team leadership Network architecture Web architecture Project management ITIL Mitre ATT&CK Cloud security Risk management Strategic planning Stakeholder communication Security operations center management

Requirements

Candidates must possess a bachelor's degree or higher in an IT-related field with at least 8 years of cybersecurity experience and a TS/SCI clearance. Required certifications include DoD 8140.01/8570.01-M IAT Level III and CSSP Analyst, along with demonstrated leadership experience.

Benefits

Healthcare Wellness Financial Retirement Family support Continuing education Flexible time off

Full description

Job Title: Cybersecurity Focused Operations Lead

Job Category: Information Technology

Time Type: Full time

Minimum Clearance Required to Start: TS/SCI

Employee Type: Regular

Percentage of Travel Required: Up to 10%

Type of Travel: Local

* * *

The Opportunity: The Cybersecurity Focused Operations Lead will directly report to the Branch Chief of Defensive Cyber Operations. The candidate will take previous experience within cybersecurity operations, hunt/blue teams, red teams, and threat intelligence to achieve strategic goals by executing policies and procedures at a tactical level that best align with strategic direction given by the Chief of TCS Cyber. The Focused Operations Lead will oversee the day-to-day execution of all teams aligned to the subordinate organization. This would include identifying opportunities to mature processes and personnel with the intent to execute the mission effectively and efficiently. When appropriate, will provide guidance and recommendations to leadership on matters relating to the prioritization of resources. As result, the Focused Operations Lead will be required to effectively work with and communicate with varying levels of stakeholders to include TCS leadership, technical customers, non-technical customers, and all TCS staff of varying skillsets and experience.

Responsibilities:

● Execute the mission of TCS Cyber Focused Operations. This requires the coordination of Threat Intelligence, Hunt, Adversarial Threat Emulations, and Defensive Countermeasures development.

● Will continue to mature and integrate all capabilities into a unified workflow, or Fusion Cell, following a predetermined model.

● Working with the Lead of the Security Operations Center (SOC), will define and integrate specific workflows into the Fusion Cell where appropriate.

● Assists both the Branch Chief of Defensive Cyber Operations and Chief of TCS Cyber with the design, development, implementation, operations and sustainment of cybersecurity services that enhance the cybersecurity posture of NGA Programs, Systems, and the Enterprise.

● When required, will conduct research and analysis to assist with solution design and implementation planning for the modernization of existing cybersecurity solutions and infrastructures in partnership with internal and external stakeholders.

● Will assist with the monitoring of performance and morale of staff across the Cybersecurity Division by providing recommended courses of action, to resolve issues, to TCS leadership.

● As needed, will provide guidance or direction to lower-level staff.

● Assists with the research and evaluation of new concepts, processes, and technology to improve performance and gain efficiencies within Focused Operations. 

Qualifications:

Required: 

● Bachelor’s degree, or higher, in Computer Science, Cyber Security Engineering or IT-related discipline. With an additional 8 years of experience in the cybersecurity field. Additional years of experience may be substituted in lieu of degree. ● Candidate must have a TS/SCI with ability to obtain a Polygraph

● Demonstrated leadership experience serving in positions such as functional manager or team lead for a minimum of 3 years.

● Sufficient knowledge of complex enterprise cybersecurity systems and technologies with the ability to interpret network and web architecture documentation.

● Demonstrated experience providing briefings to an executive audience.

● Certified DoD 8140.01 and 8570.01-M Information Assurance Technical Officer (IAT) Level III

● Certified DoD 8140.01 and 8570.01-M CSSP Analyst

● Understanding of the Security Operations Capability Maturity Model(s) (SOC-CMM, C2M2, or equivalents) to secure information systems.

● Demonstrated experience with ODNI ICS 500-27, NSM-8, and OMB M21-31

● Understanding of cybersecurity compliance policy, programs, processes, and metrics.

● Excellent verbal and writing skills with the ability to write clear and concise assessment reports.

● Good understanding of project management concepts such as ITIL and the differences between Iterative versus Waterfall methodologies.

● Demonstrated experience in cybersecurity design, engineering and operations with emphasis on NGA capabilities. 

● Strong understanding of Mitre ATT&CK and the ability to map the corresponding TTP to the appropriate defensive capability as it relates to countermeasure development. 

 

Desired: ● Demonstrated 5 or more years of experience supporting an IC or DoD agency in adopting and transitioning systems and services to cloud environments, including hybrid cloud environments.

● Proficient in vendor agnostic cloud security concepts.

-

What You Can Expect:

 A culture of integrity.

At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation.

An environment of trust.

CACI values the unique contributions that every employee brings to our company and our customers - every day. You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.

A focus on continuous growth.

Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground — in your career and in our legacy.

Pay Range:

There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.

The proposed salary range for this position is:

$103,800 - $218,100

CACI is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any other protected characteristic.

Similar roles