Security Operations Manager

Overview ECS is seeking an Security Operations Manager to work remotely providing Cyber Security operations support for NIH NIAID Enabling and Advancing Technologies (NEAT). This engagement provides a spectrum of management, technologies development, applications/software engineering, bioinformatics support, and professional development. Please Note: This position is contingent upon contract award. Responsibilities Serve as the single point of contact providing ongoing status and progress to the NIAID CO and COR. Responsible for cyber security incident resolution, monitoring of NIAID systems and components to detect potential threats, and project management and engineering support for the improvement and automation of security operation tools and processes. Provide project support for initiatives to improve and automate security operations capabilities, including developing solutions and options for project milestones, creating project plans in a task and completion tracking tool such as Jira, and reporting on progress in real-time using an IT Service Management tool such as ServiceNow. Respond to and resolve security and privacy incidents and coordinate with the NIH Threat Management and Incident Response (TMIR) team and privacy coordinators according to NIH or Federal formats and timelines. Advise and assist with SOC architecture activities, supporting all SOC tools and capabilities across SOC information systems initiatives. Required Skills and Qualifications Bachelor's degree in Cybersecurity, Computer Science, or related field. Active Public Trust or higher security clearance. Minimum of 10 years of experience in cybersecurity (15 years preferred). 8+ years’ experience leading and delivering in security operations programs and incident management for comparably sized federal agencies and security programs. At least one of the following certifications:

CISSP

GIAC GIAC (GSEC/GCIH/GCED/etc.) GCED GCIH CND SSCP Proven ability to understand threats, evaluate incident impact, and recommend risk reduction techniques. Experience with risk reporting, dashboards, and visualizations for federal stakeholders. Knowledge of security tools administration and configuration (antivirus, DLP, EDR, vulnerability tools, asset management, SIEM, CASB). Experience with enterprise-wide penetration testing remediation in a federated model (e.g., NIH). Experience monitoring enterprise environments (including cloud) for incidents and resolving them to minimize impact. Ability to establish and enhance security operations capabilities and coordinate with multi-contractor teams and across agency groups. Experience setting up, administering, and enhancing cybersecurity tools and incident resolution playbooks to reduce false positives. Knowledge of operational threat environments and incident response timelines; familiarity with penetration testing techniques and tools. Residence in the Washington DC Metro area and willingness to travel within the DC metro area and CONUS as needed. Desired Skills Experience with cybersecurity tools used at NIAID, NIH, and HHS. Effective communication and collaboration skills; experience working in cross-functional global teams. Benefits and Equal Opportunity ECS is an equal opportunity employer and does not discriminate or allow discrimination on the basis of any characteristic protected by law. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran, or any other status protected by applicable federal, state, or local jurisdiction law. ECS is a leading mid-sized provider of technology services to the United States Federal Government. We are focused on people, values and purpose. Every day, our 3800+ employees focus on providing their technical talent to support the Federal Agencies and Departments of the US Government to serve, protect and defend the American People. Job Type and Locations Employment type: Full-time Locations: Washington DC Metro area; remote work possible Salary range: $150,000 - $190,000 Note: This description reflects the current requirements of the role but is subject to change at any time. #J-18808-Ljbffr ECS