Cybersecurity Lead

SteelGate LLC; Alexandria (VA); On-site; USD 99,000 - 121,000; Full time

Job summary

SteelGate LLC in Alexandria, VA, seeks a Cybersecurity Lead to act as senior technical authority and on-site supervisor for the EOIR OIT cybersecurity program. This full-time role blends technical leadership with management oversight, handling incident response lifecycle and coordination with agency leadership.

Qualified candidates will have a Bachelor’s degree, 3–10 years in federal security operations, and DoD 8570/8140 IAT Level 2 certification. Public trust clearance and U.S.

Qualifications

• Bachelor’s Degree from an accredited institution.
• 3 to 10 years of hands-on experience in cybersecurity incident response, vulnerability management, or highly related federal security operations.
• DoD 8570/8140 IAT Level 2 certification.

Responsibilities

• Provide expert oversight for the entire incident response lifecycle from detection to remediation.
• Oversee vulnerability management and scanning operations using leading tools.
• Direct experience with SIEM/SOAR platforms and enterprise security analytics.
• Lead daily contractor tasking and coordinate with agency leadership and JSOC/JMD.

Skills

Incident response

Vulnerability management

SIEM

SOAR

Executive briefings

Education

Bachelor’s Degree

Tools

Tenable.SC

Nessus Scanners

Splunk

JIRA

ServiceNow

Job description

# Cybersecurity Lead# Cybersecurity LeadSTEELGATE LLCPublishedJuly 8, 2026LocationAlexandria, VirginiaJob TypeFull-time### Description**Cybersecurity Lead****Alexandria, VA – Full Time – Public Trust & US citizenship required**The Cybersecurity Lead serves as the senior technical authority and on-site supervisor for the IT security contracting team supporting the Executive Office for Immigration Review (EOIR) Office of Information Technology (OIT). This senior dual-hat role operates with a 70% technical and 30% management focus. The Lead provides expert oversight for the entire incident response lifecycle, ensures compliance with Department of Justice (DOJ) guidelines, manages daily contractor tasking, and serves as the primary liaison to agency leadership. Responsibilities: Technical: • Provide expert oversight for the entire incident response lifecycle, from initial detection and log correlation to final remediation and closure. • Utilize Security Information and Event Management (SIEM) and Security Orchestration, Automation, and Response (SOAR) platforms. • Exercise final decision-making authority on technical containment strategies during cybersecurity incidents. • Oversee vulnerability management and scanning operations utilizing leading industry-standard tools. • Perform initial assessments of Personally Identifiable Information (PII) incidents to determine spill severity and coordinate response actions with the Privacy Office and Office of General Counsel (OGC). • Conduct deep-dive investigations of cyber incidents, equipment loss, and ticket queues to eliminate false positives and track threats. • Proven technical command of SIEM/SOAR platforms, endpoint incident response tools, and network analytics systems. • Direct experience executing and optimizing enterprise tools like Tenable.SC, Nessus Scanners, Splunk, JIRA, and ServiceNow. Management: • Serve as the primary on-site supervisor managing daily contractor tasks and workload for the team. • Develop, maintain, and update critical cybersecurity programmatic blueprints, including the EOIR Incident Response Plan, Vulnerability Management Plan, and Insider Threat Plan. • Translate technical incident data into high-level trend analysis, metrics, and "Lessons Learned" reports for agency leadership. • Coordinate directly with the Justice Security Operations Center (JSOC) and Justice Management Division (JMD) regarding incident response, software demos, and cyber threat analytics. • Monitor team deliverables to ensure full compliance with DOJ audit log retention and information system privacy awareness policies. • Strong understanding of federal compliance frameworks, including OMB Circular A-130, FISMA (2014), and NIST SP 800-53 Rev. 5. • Demonstrated supervisory ability to lead a small technical team under a disciplined program management framework. • Excellent written and verbal communication skills, with the distinct ability to translate deeply technical cyber threats into human-readable executive briefings. Requirements • Degree: Bachelor’s Degree from an accredited institution. • Experience: 3 to 10 years of hands-on experience in cybersecurity incident response, vulnerability management, or highly related federal security operations. • Certification: DoD 8570/8140 IAT Level 2 certification Additional Details • Position Type: Full time • Hours of Operation: Monday-Friday 7:00 AM – 5:00 PM EST • Place of Performance: EOIR OIT, 4825 Mark Center Drive, Alexandria, VA 22311 • Security Clearance: Public Trust level security clearance & U.S. Citizenship required • Salary: $110kSTEELGATE LLC is a Service-Disabled, Veteran-Owned Small Business (SDVOSB) that prides itself in hiring top-level Subject Matter Experts (SME’s) proven to exceed deliverable expectations. STEELGATE LLC is focused on solving the hard problems facing our government and commercial clients. Our success lies in blending together relevant domain/functional knowledge with deep expertise in Information Technology, Cybersecurity, Defensive Cyber Operations, cloud-based DevSecOps, Data Analytics & AI, Acquisition and Acquisition Management, and more. STEELGATE LLC has a positive, inclusive workplace environment where all team members and partners work towards mutual success. We have established a reliable reach-back program whereas all SMEs are available to support, advise and directly complete mission deliverables when necessary. STEELGATE LLC has a worldwide reputation as a valued and trustworthy partner. Our can-do attitude and willingness to support any mission requirement sets us apart from other small business organizations. Find out more about STEELGATE LLC @ www.steelgatellc.com.We are an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other characteristic protected by law.