Deputy Program Manager

Deputy Program ManagerAgile Defense is currently seeking a highly technical, hands-on Cybersecurity Operations Center (CSOC) Lead and Deputy Program Manager with advanced skillsets in cyber security, to develop and operate cyber security capabilities for a variety of federal customers. Candidates should have excellent written and oral communication skills, be able to work independently and as part of a team, with demonstrated leadership capabilities. Skills and experience in Cyber Operations, Security Event Analysis, Incident Response, Cyber Hunt, Forensics, Malware Analysis, and Cyber Threat Intelligence (skills in more than one cyber discipline are preferred) are required for this position. The ideal candidate will have hands-on experience supporting a 24x7x365 CSOC environment as an analyst or engineer, experience as a technical team lead within the SOC, and operations management experience. A solid understanding of cyber threats and information security in the domains of TTP's, Threat Actors, Campaigns, and Observables. Additionally, the ideal candidate would be familiar with intrusion detection systems, intrusion analysis, security information event management platforms, endpoint threat detection tools, and security operations ticket management.Corporate duties such as solution/proposal development, corporate culture development, mentoring employees, supporting recruiting efforts, will also be required. Position is contingent on successfully completing a program-based background investigation.Job duties and responsibilities include serving as deputy to the program manager of the CSOC program to provide cyber defense capabilities to federal entities, providing comprehensive computer network defense support through security event monitoring, advanced analytics, cyber hunt, response and digital forensics, vulnerability assessment, and cyber intelligence activities in support of the SOC operational mission. Maintain a 24x7x365 schedule and minimum-manning requirements, construct and optimize operational workflows for 24x7 teams across multiple shifts, develop, collect, analyze security operational metrics to optimize CSOC performance and minimize organizational risk, serve as a technical Cyber SME, onsite task lead, and primary point of contact for customer, lead efforts planning, organization, scheduling and progress reporting of various projects, develop technical cyber security solutions in response to customer requests or in support of proposal solution development, support new Agile Defense engagements as transitional program or operations lead, support documentation of all business and workflow processes in this area, provides technical consultation in cyber security capability development, acts as a subject-matter expert to multiple tasks and/or programs, provide technical writing support in support of corporate response to RFPs/RFQs from various customers.Qualifications include a minimum of 5 years of direct operational and program management experience in delivery of Cybersecurity program or related projects, a minimum of seven (7) years of professional experience with a solid understanding of incident response, insider threat investigations, digital forensics, and cyber threats, a minimum of five (5) years of hands-on experience with experience in the last two (2) years that includes host-based and network-based security monitoring, identifying and analyzing anomalous activities with familiarity in insider threat monitoring software, host-based forensic tools, intrusion detection systems, intrusion analysis functions, security information event management (SIEM) platforms, endpoint detection and response tools, security operations ticket management. Bachelor's degree in computer science, engineering, STEM or cybersecurity.Additional skills and qualifications include the ability to create insider threat focused dashboards, reports and workflow diagrams, experience collecting data, chain of custody and reporting results; handling and escalating security issues or emergency situations appropriately; providing incident response capabilities to isolate and mitigate threats to maintain confidentiality, integrity, and availability for protected data. Experience with mentoring junior members in an open collaborative environment. Preferred skills or certifications include one of the following GCFA, GREM, GCIH, OSCP, GPEN, GFCE or equivalent preferred.Working conditions include a hybrid role in Reston, VA.Our core values include being happy, helpful, honest, humble, hungry, and hustling.