Cyber Ops Leader: Endpoint & Threat Intel

ECS; Washington (District of Columbia); Hybrid; USD 155,000 - 165,000; Full time

Job summary

Everforth ECS is seeking a Cybersecurity Operations Manager to lead two security teams in our Washington, DC office with remote options. This senior role guides Endpoint Management and Threat Intelligence within a mature security operations program spanning endpoint security, event monitoring, threat intel, and incident response.

You will work with executive leadership to define risk thresholds, translate complex findings into actionable guidance, and ensure teams operate with purpose,

Qualifications

• Expert-level endpoint security across servers, workstations, and mobile devices.
• MDM and mobility security experience.
• Vulnerability management and CVSS/CWE frameworks.
• Active Directory and GPOs knowledge.
• Develop and document repeatable security metrics.
• Threat intelligence operations and analytical frameworks.
• IOC processing and TTP analysis experience.
• Adversary emulation, pentesting, purple teaming, risk analysis.
• Experience supporting cybersecurity exercises.
• Ability to present actionable intelligence to technical and exec stakeholders.
• Proven SOC leadership in fast-paced settings.
• Multi-month project planning with risk tracking.
• Cross-functional collaboration across IT and business teams.
• Ability to manage competing priorities with leadership input.
• Experience communicating enterprise risk to executives.
• Log analysis and security event triage capabilities.
• QA/continuous improvement in security ops.
• Scripting/automation in Python, PowerShell, Bash, or Perl.
• Familiarity with Java/.NET/VBScript concepts.

Responsibilities

• Manage two security teams: Endpoint Management and Threat Intelligence.
• Lead endpoints across servers, workstations, and mobile devices; drive hardening and improvements.
• Guide IOC processing and threat intelligence shaping defensive strategy.
• Deliver actionable intel to tech teams and executives.
• Define risk thresholds with executive leadership and ensure proactive operations.

Skills

Endpoint security expertise

MDM & mobility security

Vulnerability & patch management

Active Directory & GPOs

Operational metrics for security

Threat intel operations

IOC processing & TTP analysis

Adversary emulation & purple teaming

Cyber exercise planning

Executive briefings for risk

Security operations leadership

Project planning & risk tracking

Cross-functional collaboration

Prioritization under pressure

Enterprise risk communication

Log analysis & security event triage

QA & continuous improvement

Scripting (Python/PowerShell)

Application development familiarity (J

Education

Bachelor's degree in Cybersecurity/CS/IT or related field

Master's degree preferred

CISSP/CISM/GCTI/GCIA or similar certifications preferred

Job description

Everforth ECS is seeking a Cybersecurity Operations Manager to lead two security teams in our Washington, DC office with remote options. This senior role guides Endpoint Management and Threat Intelligence within a mature security operations program spanning endpoint security, event monitoring, threat intel, and incident response.

You will work with executive leadership to define risk thresholds, translate complex findings into actionable guidance, and ensure teams operate with purpose,