Cybersecurity Ops Lead: Endpoint & Threat Intel, Remote

Socket.dev; Washington (District of Columbia); Hybrid; USD 155,000 - 165,000; Full time

Job summary

Everforth ECS in Washington, DC is seeking a Cybersecurity Operations Manager to lead two high-impact security teams: Endpoint Management and Threat Intelligence. This senior role collaborates with executive leadership to define risk thresholds and translate technical findings into actionable guidance, ensuring measurable goals and proactive defense across the organization.

The role oversees endpoint security across servers, workstations, and mobile devices, and guides analysts in IOC

Qualifications

• Endpoint security across servers, workstations, and mobile devices.
• MDM and enterprise mobility security experience.
• Vulnerability management and related frameworks (CVSS, CWE).
• Microsoft Active Directory and GPOs knowledge.

Responsibilities

• Lead two security teams: Endpoint Management and Threat Intelligence.
• Define acceptable risk thresholds with executive leadership and translate findings into guidance.
• Develop and track repeatable operational metrics for endpoint security and threat intel activities.
• Drive proactive security posture through measurable goals and cross-team collaboration.

Skills

Endpoint security

MDM

Vulnerability management

Active Directory

GPOs

Operational metrics

Threat intelligence operations

IOC processing

TTP analysis

Adversary emulation

Penetration testing

Purple teaming

Security operations management

Project planning

Stakeholder communication

Executive collaboration

Enterprise risk

Job description

Everforth ECS in Washington, DC is seeking a Cybersecurity Operations Manager to lead two high-impact security teams: Endpoint Management and Threat Intelligence. This senior role collaborates with executive leadership to define risk thresholds and translate technical findings into actionable guidance, ensuring measurable goals and proactive defense across the organization.

The role oversees endpoint security across servers, workstations, and mobile devices, and guides analysts in IOC