Cyber Security Manager

Leidos•Alexandria, VA

19h•Hybrid

About The Position

The Digital Modernization Sector is seeking a Cyber Security Manager in Alexandria, VA to support the DISA GSM-O II TN09 Network Assurance (NA) Program. GSM-O II provides network operations and cyber defense support to the Defense Information Systems Agency (DISA), the Department of Defense (DoD), and Combatant Commands (CoCOMs). This is a hybrid position with a 50/50 remote/onsite split at the Mark Center in Alexandria. The selected candidate will serve as the TN09 Site Lead for the National Capitol Region, providing leadership for defensive cyber operations activities. This role requires proactive engagement with a variety of stakeholders, anticipating their needs, and delivering high-quality results. The candidate will collaborate across multiple sites and work areas including with the TN09 Program Manager, Deputy, Service Delivery Manager, other DISA monitoring center leads, and task order leadership globally. Key responsibilities include overseeing cyber service level agreement development, CTO and DTO Orders tracking, CESO CSSP including: correlating actionable security events, and conducting network traffic analysis using raw packet data, netflow, IDS/IPS, and custom sensor output. The candidate will also coordinate resources during incident response efforts and ensure the seamless execution of mission requirements.

Requirements

Active Top Secret clearance (must be maintained).
Bachelor’s degree in a related discipline from an accredited institution, or equivalent experience/combined education, with 8+ years of relevant experience. Additional years of related experience may be considered in lieu of a degree.
Hold a DoD-8570 IAT Level 2 baseline certification (e.g., Security+ CE, CISSP, or equivalent) and the ability to obtain a CSSP-A certification within 180 days of the start date.
Strong understanding of Cyber Network Defense (CND) principles, including protection, detection, response, and sustainment within a Computer Incident Response organization.
Motivated self-starter and team leader with excellent written and verbal communication skills.

Nice To Haves

Experience with DISA and DoD networks.
Advanced knowledge of TCP/IP, common networking ports and protocols, traffic flow, system administration, the OSI model, defense-in-depth strategies, and common security elements.
Expertise in the architecture, engineering, and operations of at least one enterprise SIEM platform (e.g., Elastic SIEM, ArcSight, Splunk, Sentinel).
Demonstrated experience briefing Senior Executive Service (SES) and General Officer/Flag Officer (GO/FO) leadership.
Advanced certifications such as SANS GIAC/GCIA/GCIH, GLSC, or CASP.

Responsibilities

Deliver on day-to-day mission requirements and ensure operational excellence.
Manage customer relationships and ensure seamless and effective delivery of contract responsibilities.
Provide effective leadership for the DISA CESO Network Assurance staff, including employee engagement, training, performance reviews, and other personnel management responsibilities.
Lead teams responsible for: Triaging and analyzing alerts from sensors across monitored networks.
Developing Service Level Agreements for the Agency Customers Mange tracking of Cyber Tasking Orders and DISA Tasking Orders Providing incident and situational awareness reporting to subscribers of DISA cybersecurity services.
Creating and modifying signatures and custom alerting logic based on adversary activity, vulnerabilities, and internal analysis.
Serve as the Senior GSM-O II Representative on-site, coordinating with local government personnel on administrative tasks for all contract staff.