Cybersecurity Operations Lead: Detect, Respond & Defend

Booz Allen Hamilton; Washington (District of Columbia); On-site; USD 55,000 - 126,000; Full time

Job summary

Booz Allen Hamilton is seeking a Cybersecurity Operations Lead to defend client systems and data, lead security monitoring, and guide incident response for ARPA‑H engagements.

You will implement and optimize security content, provide senior‑level guidance on policies and procedures, and collaborate with executives to accelerate defense against evolving threats. This role requires strong communication, hands‑on leadership, and the ability to operate in fast‑paced environments.

Qualifications

• 8+ years of cybersecurity experience including security operations, incident response, threat detection, or defensive cyber operations.
• Experience leading security monitoring, incident investigation, containment, eradication, recovery, and after-action activities.
• Experience using cybersecurity solutions such as SIEM, XDR, DLP, and Threat Intelligence platforms.
• Knowledge of adversary tactics, techniques, and procedures, including the MITRE ATT&CK framework.
• Experience communicating with senior-level executives, including SES or GS-15 levels.
• Proficiency with Microsoft Office programs (Excel, Word, PowerPoint).
• Bachelor’s degree is required.

Responsibilities

• Lead hands-on activities to monitor, detect, and respond to cyber threats.
• Implement, maintain, and optimize security content such as rules, signatures, and alerts.
• Provide expert guidance to the ARPA‑H CISO on policies, procedures, and security processes.

Skills

Cybersecurity experience

Incident response leadership

Cybersecurity solutions

MITRE ATT&CK knowledge

Executive communication

MS Office usage

Education

Bachelor’s degree

Tools

SIEM

XDR

DLP

Threat Intelligence platforms

Job description

Booz Allen Hamilton is seeking a Cybersecurity Operations Lead to defend client systems and data, lead security monitoring, and guide incident response for ARPA‑H engagements.

You will implement and optimize security content, provide senior‑level guidance on policies and procedures, and collaborate with executives to accelerate defense against evolving threats. This role requires strong communication, hands‑on leadership, and the ability to operate in fast‑paced environments.