Cyber Operations and Threat Management Lead

Accord Technologies Inc; Columbia (SC); On-site; USD 83,000 - 152,000; Part time

Job summary

Accord Technologies Inc. seeks a Cyber Operations and Threat Management Lead to mature the SOC capability and drive threat detection and response under the CISO. The role requires broad IT expertise across on-prem and cloud environments, with leadership to guide SOC Analysts and collaborate with multiple teams.

You will advance incident response, playbooks, and continuous monitoring, while coordinating with vendors and internal stakeholders to sustain audit-ready operations.

Qualifications

• 10+ years of IT experience with Windows, Linux, and Web-based applications.
• 5+ years in enterprise infrastructure design and deployment.
• 5 years in a SOC lead capacity.

Responsibilities

• Drive innovation and maturation of Security Operations capabilities.
• Oversee identification, analysis, and response to security incidents with rapid containment.
• Perform threat identification and risk analysis for the enterprise.
• Assist in implementing Continuous Monitoring and Incident Response processes.
• Refine Playbooks, Processes, and Alerts for continuous improvement.
• Assist with advanced threat hunting and attacker discovery.
• Collaborate with IT, Development, and Business teams to advance security.
• Lead security projects and drive ongoing improvement.

Skills

Windows/Linux

Web-based applications

SOC lead capacity

Threat identification & analysis

Incident response

Continuous monitoring

Playbook refinement

Threat hunting

Security operations

Vendor interaction

Job description

Job Title: Cyber Operations and Threat Management Lead

Job Location: Columbia, SC (Onsite)

Position Type: W2 Contract

Duration: 36 Months

Primary Skills: IT working with Windows, Linux, and Web-based applications, enterprise infrastructure design and deployment, SOC lead capacity, cyber threat response and incident handling, cyber security operations, security service portfolio management, threat identification and analysis, continuous monitoring, incident response processes, playbook refinement, advanced threat hunting, security team project leadership, audit-ready compliance, Microsoft Office products (Word, Excel, PowerPoint, Visio)

Preferred Skills: Identifying, testing and leading remediation of OWASP Top Ten, CWE/SANS TOP 25 Most Dangerous Software Errors, penetration testing and vulnerability assessments in FISMA environments, eGRC systems, CISSP, GCIH, Security+, BS degree in computer science/information technology/engineering, Cloud certification (CASP+), Network security certifications

Position Overview

The Cybersecurity Operations Lead will be in a unique position to help mature the Security Operations Center capability and will work directly for the CISO to drive innovation and maturation of the Agency's Cyber threat detection and response capabilities. The Office of Cybersecurity is tasked with performing ongoing enterprise cybersecurity threat monitoring and incident response capabilities. This position requires a broad and keen understanding of technology and IT delivery of Security Operation services for on-premise and cloud-based equipment and critical applications. The team is seeking individuals who are highly productive, very flexible, and can work in an environment where fluidity of duties is common. Each team member is expected to contribute with minimal supervision.

Daily Duties / Responsibilities

Technical

• Drive innovation and maturation of Security Operations capabilities.
• Oversee the identification, analysis, and response to security incidents, ensuring rapid containment and resolution.
• Perform threat identification and analysis of risks to the enterprise.
• Assist in the implementation and advancement of Continuous Monitoring and Incident Response processes and procedures.
• Consistently review and refine Playbooks, Process, and Alert reviews to identify areas of improvement.
• Assist with advanced threat hunting, looking for attacker presence within the environment.
• Work with Information Technology, Application Development, and Business Teams to advance security efforts of the enterprise.
• Lead security team projects, and continuous improvement.

Non-Technical

• Act as an escalation point and provide leadership, mentorship, and guidance to SOC Analyst I, II, and III.
• Lead and mentor a team of Security Operations analysts, ensuring they are well-trained and motivated.
• Assist in staffing Security Operations staff.
• Collaborate with compliance teams to maintain audit-ready status.
• Communicate clearly, verbally and in writing, to interact effectively with internal and external vendors, project team members, management, and agency departments; build relationships and use facilitation skills with both technical and non-technical personnel.
• Organize information in a way that is appropriate for technical explanations without losing sight of the needs and aptitude of the audience.
• Work independently and collaborate with multiple teams and vendors.
• Multitask and prioritize tasks effectively in order to meet deadlines.
• Maintain intermediate to advanced skills in Microsoft Office products (Word, Excel, PowerPoint, Visio) and working with templates and style guidelines for branding consistency.
• Maintain keen attention to detail while seeing the big picture.
• Evaluate and select products and vendors to support initiatives.
• Accept changes and constructive criticism in a fast turnaround environment.
• Understand the offerings and capabilities within Cloud service providers.

Required Skills

• 10+ years of experience of IT working with Windows, Linux, and Web-based applications
• 5+ years of experience with enterprise infrastructure design and deployment
• 5 years of related experience in a SOC lead capacity

Preferred Skills

• Experience identifying, testing and leading remediation efforts of OWASP Top Ten, CWE/SANS TOP 25 Most Dangerous Software Errors, etc.
• Prior experience performing penetration testing and vulnerability assessments in organizations subject to FISMA or similar requirements
• Prior experience in working with eGRC systems

Required / Preferred Certifications

• Required: Any one or combination of: CISSP, GCIH, Security+
• Preferred: BS degree in computer science, information technology, engineering or similar discipline; Cloud certification (i.e., CASP+); Network security certifications