Blue Team Lead, Cyber Defense & Incident Response

STOPSO; Fayetteville (NC); On-site; USD 120,000 - 180,000; Full time

Job summary

STOPSO is seeking a Blue Team Lead and Senior Cyber Defense Analyst to support the USARC DCOMSS program at Fort Bragg, NC. Lead Blue Team monitoring, detection, incident coordination, and integrated assessment execution.

You will manage analyst coverage, escalation, and operational readiness, coordinating with staff, government stakeholders, and support teams in a secure government facility.

Qualifications

• Minimum 5 years of documented relevant experience in cyber operations (DoD or enterprise IT).
• DoD Cyber Workforce Framework 511 Intermediate proficiency required.
• DoDM 8140.03 qualification requirements must be met for each work role.
• Current matrix-listed cert options include CEH(P), Cloud+, FITSP-O, GCED, GDSA, GMON, GRID, GSEC, PenTest+, Security+.

Responsibilities

• Direct daily Blue Team operations, including watch coverage and escalations.
• Coordinate incident response, threat hunting, and tooling with technical staff.
• Maintain Blue Team SOPs, playbooks, and quality reviews.
• Review investigations and produce timely operational reports for customers.
• Integrate vulnerability assessments and CTI with coverage and surges.
• Track staffing, access, and performance; mentor analysts.

Skills

Cyber defense analysis

Incident response

Threat hunting

Network monitoring

Defensive tooling

Technical leadership

SIEM

EDR

IDS/IPS

Communication skills

Education

DoD Cyber Workforce Framework 511 Intermediate

DCWF 521/531 qualifications

Security certifications CEH, Cloud+, GSEC

Tools

SIEM

EDR

IDS/IPS

Job description

STOPSO is seeking a Blue Team Lead and Senior Cyber Defense Analyst to support the USARC DCOMSS program at Fort Bragg, NC. Lead Blue Team monitoring, detection, incident coordination, and integrated assessment execution.

You will manage analyst coverage, escalation, and operational readiness, coordinating with staff, government stakeholders, and support teams in a secure government facility.