Cybersecurity Operations Lead Contract Columbia, SC

Cybersecurity Operations Lead Security Operations Center (SOC) Location: Columbia SC Onsite

Interview Process: 1 round Virtual/Online

Duration: 12 Months
Employment Type: Contract
Experience Required: 10 Years

Candidate location: Candidate MUST be a SC resident. No relocation allowed.

Project Scope:

We are seeking an experienced Cybersecurity Operations Lead to help mature and advance the organizations Security Operations Center (SOC) capabilities.

The role will work directly with the Chief Information Security Officer (CISO) to drive innovation and strengthen cybersecurity threat detection monitoring and incident response capabilities across enterprise systems including on-premises and cloud-based infrastructure and critical applications.

The successful candidate will provide technical leadership oversee security incident response mentor SOC analysts support advanced threat hunting and continuously improve security operations processes and procedures.

This is an ongoing project with aggressive timelines. Candidates must be productive flexible self-directed and comfortable working in a fast-paced environment where responsibilities may evolve. Team members are expected to deliver quality work with minimal supervision.

Key Responsibilities:

Security Operations Leadership

• Drive innovation and maturity of Security Operations Center capabilities.
  
• Serve as an escalation point for SOC Analyst I II and III.
  
• Provide leadership mentorship and technical guidance to SOC analysts.
  
• Lead and mentor the Security Operations team ensuring analysts are trained and motivated.
  
• Assist with staffing Security Operations personnel.
  
• Lead security team projects and continuous improvement initiatives.
  

Threat Monitoring and Incident Response

• Oversee the identification analysis and response to security incidents.
  
• Ensure rapid incident containment investigation and resolution.
  
• Perform threat identification and analyze cybersecurity risks to the Medicaid Enterprise.
  
• Support the implementation and advancement of continuous monitoring and incident response processes.
  
• Assist with advanced threat hunting to identify potential attacker presence within the environment.
  
• Review and refine security playbooks processes and alerts to identify improvement opportunities.
  

Security Collaboration and Compliance

• Work with IT application development and business teams to advance enterprise security initiatives.
  
• Collaborate with compliance teams to maintain audit-ready status.
  
• Support cybersecurity threat monitoring and incident response across on-premises and cloud-based systems.
  
• Help evaluate and implement effective security practices tools and technologies.
  

Required Skills & Experience:

• 10 years of IT experience working with Windows Linux and web-based applications.
  
• 5 years of experience in enterprise infrastructure design and deployment.
  
• 5 years of related experience in a SOC Lead capacity.
  
• Broad understanding of enterprise cybersecurity operations threat monitoring and incident response.
  
• Experience leading or guiding Security Operations analysts.
  
• Strong understanding of security incident handling threat identification and response processes.
  
• Ability to work independently and manage multiple deliverables within defined deadlines.
  

Preferred Skills:

Experience identifying testing and leading remediation efforts related to:

• OWASP Top Ten
  
• CWE/SANS Top 25 Most Dangerous Software Errors
  
• Previous experience performing penetration testing and vulnerability assessments in organizations subject to FISMA or similar compliance requirements.
  
• Experience working with enterprise Governance Risk and Compliance (eGRC) systems.
  

Education:
Bachelors degree in Computer Science Information Technology Engineering or a related discipline.

• Cloud certification such as CASP.
  
• Network security certifications.
  

Required Certifications

Candidates must hold any one or a combination of the following certifications:

• Certified Information Systems Security Professional (CISSP)
  
• GIAC Certified Incident Handler (GCIH)
  
• CompTIA Security
  

Required Skills:

Required Skills & Experience: 10 years of IT experience working with Windows Linux and web-based applications. 5 years of experience in enterprise infrastructure design and deployment. 5 years of related experience in a SOC Lead capacity. Broad understanding of enterprise cybersecurity operations threat monitoring and incident response. Experience leading or guiding Security Operations analysts. Strong understanding of security incident handling threat identification and response processes. Ability to work independently and manage multiple deliverables within defined deadlines.