Cybersecurity Task Lead

Five Stones Research Corporation•Linthicum Heights, MD

5h•$170,000 - $210,000

About The Position

Five Stones Research Corporation (5SRC) is seeking a Cybersecurity Task Lead to provide strategic, cybersecurity, and operational support to the CIO and drive enterprise IT and cybersecurity initiatives. The role oversees strategy, portfolio and acquisition roadmaps, governance, resource optimization, and co-owns the cybersecurity program, including risk assessments, vulnerability testing, audits, and incident response. It requires strong IT and cybersecurity expertise, portfolio and project management skills, and prior operational experience on USCYBERCOM-directed networks. This position is contingent upon contract award. The Cybersecurity Task Lead maintains enterprise IT architecture and oversees cloud and data strategies in coordination with the EA Task / Data Task Lead. The role directs enterprise portfolio governance, resource allocation, cybersecurity operations, threat hunting, service desk and operational support, and coordination with command-and-control organizations. It supervises teams and serves as the PM’s alternate for CIO- and CISO-facing matters. The position is based in Linthicum Heights, Maryland, requires U.S. citizenship and a DoD TS/SCI security clearance, and involves some travel.

Requirements

Bachelor of Science from an accredited college or university in Computer Science, Information Technology, Cybersecurity, Management Information Systems, or Engineering.
At least five years of experience within the last ten years leading and supervising teams performing work across DoDI 8140.01–8140.03 workforce elements: IT (Cyberspace), Cybersecurity, Software Engineering, Data/AI, and Cyber Enablers.
At least five years of experience within the last ten years briefing a CIO and CISO on agency-wide planned, recommended, and directed actions to enable unity of effort and operational effectiveness.
At least five years of experience within the last ten years overseeing personnel who receive, interpret, plan, brief, execute, and report on orders issued by the Commander of USCYBERCOM or subordinate commanders, the National Manager for National Security Systems, or another authorized commander with command authority over DC3 CIO-managed systems and personnel.
At least five years of experience within the last ten years leading and supervising teams in Government and private networking and infrastructure environments, classified and unclassified, similar in scope and complexity to the PWS.
At least five years of experience within the last ten years leading and supervising teams building, operating, securing, defending, and extending LAN/WAN systems, including wireless components, firewalls, routing and switching, IPv6, VPN, cloud computing, virtualized servers, storage arrays, and other IT and data systems.
At least five years of experience within the last ten years leading and supervising teams with unified communications, including designing, installing, maintaining, and administering VTC systems for Unclassified, Secret, and TS/SCI environments.
At least five years of experience within the last ten years leading and supervising teams running CI/CD pipelines using containerization, micro-segmentation, and Infrastructure as Code, and managing ATO/cATO for several systems.
At least five years of experience within the last ten years leading and supervising teams planning and executing migration of legacy systems into multi-cloud and hybrid-cloud environments.
At least five years of experience within the last ten years leading and supervising personnel developing and implementing data lakes and other aspects of modern data strategies.
Ten years of relevant experience.
U.S. citizenship.
Department of Defense (DoD) TS/SCI security clearance.

Nice To Haves

PMP, CISSP, CISM, or GSLC certification; DoD 8140 Executive Cyber Leadership (901) alignment.
Current or recent performance at DC3, AFCYBER, 16th Air Force, or a USCYBERCOM-aligned Air Force cyber unit.
Knowledge of DC3’s CADO-IS, VRMN, DCISE, and Fusion Suite environments and the planned Azure-to-AWS cATO transition.
Experience directing a CSSP-aligned SOC and an enterprise-scale eMASS-based RMF program.
Experience with Jira/Confluence/GitLab-based DevSecOps toolchains.
ITIL 4 or ISO/IEC 20000-1 practitioner background.
DoDAF familiarity sufficient to work with the EA Task / Data Task Lead.

Responsibilities

Drive successful execution of enterprise IT and cybersecurity initiatives.
Develop and maintain enterprise IT strategic initiatives, portfolio and acquisition strategies, and roadmaps aligned with mission priorities and relevant cyber frameworks; deliver the Portfolio/Acquisition Strategies and Roadmaps monthly.
Maintain and execute enterprise IT architecture, oversee cloud computing strategy, and manage enterprise data strategy in coordination with the EA Task / Data Task Lead.
Govern enterprise portfolios by establishing structures and processes and implementing reporting and communication mechanisms; deliver the Enterprise Portfolios report monthly.
Optimize allocation of IT enterprise resources and manage program dependencies through data-driven analysis, including cost-benefit analyses to inform build/buy decisions.
Oversee regular cybersecurity risk assessments and vulnerability testing, including NIST SP 800-115 penetration testing and weekly credentialed scans with CORA-scored reports.
Coordinate internal and external security audits and advise the certified ISSM and ISSO.
Lead crisis response during major breaches to support detection, containment, and recovery; maintain and annually update Incident Response Policies and Procedures.
Maintain command and control with the CSSP, AFCYBER Operations Center, and other C2 nodes; receive, execute, and report on authorized command orders and maintain Mission Relevant Terrain-Cyber and Priority Intelligence Requirements.
Direct the Unified Enterprise Service Desk (Tier 0–2), 12x5 on-site and 24x7 on-call operational support, and the Enterprise and Security Operations Center stand-up to IOC using Government-designated tools.
Direct continuous threat hunting across IT and OT environments, the 24-hour Anomaly Investigation Report, vulnerability and configuration management, and Cybersecurity-gated IaC/CaC change processes.
Supervise teams and serve as the PM’s alternate for CIO- and CISO-facing matters.