Cybersecurity Operations Manager

ECS; Washington (District of Columbia); Hybrid; USD 155,000 - 165,000; Full time

Job summary

Everforth ECS is seeking a Cybersecurity Operations Manager to lead two security teams in our Washington, DC office with remote options. This senior role guides Endpoint Management and Threat Intelligence within a mature security operations program spanning endpoint security, event monitoring, threat intel, and incident response.

You will work with executive leadership to define risk thresholds, translate complex findings into actionable guidance, and ensure teams operate with purpose,

Qualifications

• Expert-level endpoint security across servers, workstations, and mobile devices.
• MDM and mobility security experience.
• Vulnerability management and CVSS/CWE frameworks.
• Active Directory and GPOs knowledge.
• Develop and document repeatable security metrics.
• Threat intelligence operations and analytical frameworks.
• IOC processing and TTP analysis experience.
• Adversary emulation, pentesting, purple teaming, risk analysis.
• Experience supporting cybersecurity exercises.
• Ability to present actionable intelligence to technical and exec stakeholders.
• Proven SOC leadership in fast-paced settings.
• Multi-month project planning with risk tracking.
• Cross-functional collaboration across IT and business teams.
• Ability to manage competing priorities with leadership input.
• Experience communicating enterprise risk to executives.
• Log analysis and security event triage capabilities.
• QA/continuous improvement in security ops.
• Scripting/automation in Python, PowerShell, Bash, or Perl.
• Familiarity with Java/.NET/VBScript concepts.

Responsibilities

• Manage two security teams: Endpoint Management and Threat Intelligence.
• Lead endpoints across servers, workstations, and mobile devices; drive hardening and improvements.
• Guide IOC processing and threat intelligence shaping defensive strategy.
• Deliver actionable intel to tech teams and executives.
• Define risk thresholds with executive leadership and ensure proactive operations.

Skills

Endpoint security expertise

MDM & mobility security

Vulnerability & patch management

Active Directory & GPOs

Operational metrics for security

Threat intel operations

IOC processing & TTP analysis

Adversary emulation & purple teaming

Cyber exercise planning

Executive briefings for risk

Security operations leadership

Project planning & risk tracking

Cross-functional collaboration

Prioritization under pressure

Enterprise risk communication

Log analysis & security event triage

QA & continuous improvement

Scripting (Python/PowerShell)

Application development familiarity (J

Education

Bachelor's degree in Cybersecurity/CS/IT or related field

Master's degree preferred

CISSP/CISM/GCTI/GCIA or similar certifications preferred

Job description

Job Description

Everforth ECS is seeking a Cybersecurity Operations Manager to work in our Washington, DC office / remote. The role is contingent upon additional funding. We are seeking an experienced and driven Cybersecurity Operations Manager to lead two high-impact security teams: Endpoint Management and Threat Intelligence. This is a senior‑level position within a mature, full‑spectr um security operations organization that spans endpoint security, event monitoring, threat intelligence, and advanced incident response.

In this role, you will carry equal responsibility across both teams. That means leading a group that keeps the enterprise's endpoint environment — servers, workstations, and mobile devices — hardened, well‑managed, and continuously improving, while simultaneously guiding analysts who track adversary behavior, process indicators of compromise, and deliver intelligence that shapes the organization's defensive strategy before threats have a chance to land.

This is a role for someone who leads from the front. You will work directly with executive leadership to define acceptable risk thresholds, translate complex technical findings into clear organizational guidance, and ensure both teams are operating with purpose, measurable goals, and a proactive mindset.

Salary Range

$155,000 – $165,000

Required Skills - Endpoint Management

• Expert‑level knowledge of enterprise endpoint security across servers, workstations, and mobile devices
• Experience with Mobile Device Management (MDM) and enterprise mobility security
• Proficiency in vulnerability management, patch management, and associated frameworks such as CVSS and CWE
• Working knowledge of Microsoft Active Directory and Group Policy Objects (GPOs)
• Ability to develop, document, and execute repeatable operational metrics for endpoint security

Threat Intelligence

• Strong understanding of threat intelligence operations, platforms, and analytical frameworks
• Hands‑on experience with cyber adversary research, indicator of compromise (IOC) processing, and TTP analysis
• Familiarity with adversary emulation, penetration testing, purple teaming, and enterprise risk analysis
• Experience supporting or leading cybersecurity exercise planning
• Ability to produce and deliver actionable intelligence briefings to both technical teams and executive stakeholders

Leadership & Program Management

• Proven experience managing security operations teams in a fast‑paced, high‑priority environment
• Ability to develop and execute detailed, multi‑month resourced project plans with proactive risk tracking and clear stakeholder communication
• Comfortable working across organizational boundaries, including networking, systems administration, and technology support partners
• Able to manage competing priorities, including ad‑hoc requests from senior leadership, without losing sight of team objectives
• Experience working directly with executive management to identify, evaluate, and communicate enterprise risk

Desired Skills

• Log analysis, standardized query development, and security event triage
• Quality assurance and continuous improvement practices within security operations
• Scripting and automation experience (Python, PowerShell, Bash, or Perl)
• Familiarity with application development concepts (Java, .NET, VBScript)
• Experience identifying and evaluating emerging cybersecurity technologies
• Root cause analysis and security event documentation
• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field; Master's degree preferred
• Professional certifications such as CISSP, CISM, GCTI, or GCIA are strongly preferred

Equal Opportunity Statement

ECS Federal LLC is an equal opportunity employer and does not discriminate or allow discrimination on the basis any characteristic protected by law. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, or local jurisdiction law.

About Everforth ECS

Everforth ECS is the federal segment of Everforth, a $4B global organization with over 10,000 employees. Our nearly 3,500 professionals deliver advanced technology solutions in data and AI, cybersecurity, and enterprise transformation, serving defense, intelligence, and federal civilian agencies.

Our work powers mission‑critical outcomes, strengthens technology partnerships, and creates meaningful opportunities for our people. We are defined by a commitment to excellence in delivery, a culture of innovation, and an environment where talent can thrive and grow.

We Value

• Attracting and developing top talent and high‑performing teams
• Fostering a culture that is engaging, accountable, and mission‑driven

Closing Statement

Meet the challenge. Make a difference with Everforth ECS!