Cybersecurity Task Lead

Five Stones Research Corporation•Linthicum Heights, MD

13d•Onsite

About The Position

Five Stones Research Corporation (5SRC) is seeking a Cybersecurity Task Lead to provide strategic, cybersecurity, and operational support to the CIO and drive enterprise IT and cybersecurity initiatives. The role oversees strategy, portfolio and acquisition roadmaps, governance, resource optimization, and co-owns the cybersecurity program, including risk assessments, vulnerability testing, audits, and incident response. The position requires strong IT and cybersecurity expertise, portfolio and project management skills, and prior operational experience on USCYBERCOM-directed networks. The position is contingent upon contract award. The Cybersecurity Task Lead drives enterprise IT and cybersecurity initiatives; develops and maintains aligned IT strategies, portfolios, and acquisition roadmaps; maintains enterprise IT architecture and oversees cloud and data strategies; and governs enterprise portfolios and resource allocation. The role oversees cybersecurity assessments and audits, advises the certified ISSM and ISSO, leads major incident response, and maintains command-and-control coordination with cybersecurity operations organizations. It also directs the unified enterprise service desk and operational support, helps establish the Enterprise and Security Operations Centers, oversees threat hunting and vulnerability/configuration management, and supervises teams. The task lead serves as the PM’s alternate for CIO- and CISO-facing matters. The role is based in Linthicum Heights, Maryland, with some travel expected. A DoD TS/SCI clearance and U.S. citizenship are required. Salary range: $170,000–$210,000.

Requirements

Bachelor of Science from an accredited college or university in Computer Science, Information Technology, Cybersecurity, Management Information Systems, or Engineering.
At least five years of experience in the last ten years leading and supervising teams performing work across DoDI 8140.01–8140.03 workforce elements: IT (Cyberspace), Cybersecurity, Software Engineering, Data/AI, and Cyber Enablers.
At least five years of experience in the last ten years briefing a CIO and CISO on agency-wide planned, recommended, and directed actions to enable unity of effort and operational effectiveness.
At least five years of experience in the last ten years overseeing personnel receiving, interpreting, planning, briefing, executing, and reporting on orders issued by the Commander of USCYBERCOM or a subordinate commander, the National Manager for National Security Systems, or another authorized commander with command authority over DC3 CIO-managed systems and personnel.
At least five years of experience in the last ten years leading and supervising teams in Government and private networking and infrastructure environments, classified and unclassified, similar in scope and complexity to the PWS.
At least five years of experience in the last ten years leading and supervising teams building, operating, securing, defending, and extending LAN/WAN systems, including wireless components, firewalls, routing and switching, IPv6, VPN, cloud computing, virtualized servers, storage arrays, and other IT and data systems.
At least five years of experience in the last ten years leading and supervising teams responsible for unified communications, including design, installation, maintenance, and administration of VTC systems for Unclassified, Secret, and TS/SCI environments.
At least five years of experience in the last ten years leading and supervising teams running a CI/CD pipeline using containerization, micro-segmentation, and Infrastructure as Code, and managing ATO/cATO for several systems.
At least five years of experience in the last ten years leading and supervising teams planning and executing migration of legacy systems into multi-cloud and hybrid-cloud environments.
At least five years of experience in the last ten years leading and supervising personnel developing and implementing data lakes and other aspects of modern data strategies.
Ten years of relevant experience.
DoD TS/SCI security clearance.
U.S. citizenship.

Nice To Haves

PMP, CISSP, CISM, or GSLC certification; DoD 8140 Executive Cyber Leadership (901) alignment.
Current or recent performance at DC3, AFCYBER, 16th Air Force, or a USCYBERCOM-aligned Air Force cyber unit.
Knowledge of DC3’s CADO-IS, VRMN, DCISE, and Fusion Suite environments and the planned Azure-to-AWS cATO transition.
Experience directing a CSSP-aligned SOC and an eMASS-based RMF program at enterprise scale.
Experience with Jira/Confluence/GitLab-based DevSecOps toolchains.
ITIL 4 or ISO/IEC 20000-1 practitioner background.
DoDAF familiarity sufficient to work with the EA Task / Data Task Lead.

Responsibilities

Drive the successful execution of enterprise IT and cybersecurity initiatives.
Develop, maintain, and align enterprise IT strategic initiatives, portfolio and acquisition strategies, and roadmaps with mission priorities and relevant cyber frameworks; deliver the strategies and roadmaps monthly.
Maintain and execute enterprise IT architecture, oversee cloud computing strategy, and manage enterprise data strategy in coordination with the EA Task / Data Task Lead.
Govern enterprise portfolios by establishing portfolio structures, formalizing processes, and implementing reporting and communications mechanisms; deliver the Enterprise Portfolios report monthly.
Optimize IT enterprise resource allocation and manage program dependencies through data-driven analysis, including cost-benefit analyses to inform build-versus-buy decisions.
Oversee regular cybersecurity risk assessments and vulnerability testing, including NIST SP 800-115 penetration testing and weekly credentialed scans with CORA-scored reports.
Coordinate internal and external security audits and advise the certified ISSM and ISSO.
Lead crisis response during major breaches to support timely detection, containment, and recovery; maintain and annually update Incident Response Policies and Procedures.
Maintain command and control with the CSSP, AFCYBER Operations Center, and other C2 nodes to receive, execute, and report on orders from authorized command authorities; maintain Mission Relevant Terrain-Cyber and Priority Intelligence Requirements.
Direct the Unified Enterprise Service Desk (Tier 0–2) and 12x5 on-site / 24x7 on-call operational support.
Direct the Enterprise and Security Operations Center stand-up to IOC using Government-designated tools.
Direct continuous threat hunting across IT and OT environments, including the 24-hour Anomaly Investigation Report, vulnerability and configuration management program, and cybersecurity-gated IaC/CaC change process.
Supervise teams and serve as the PM’s alternate for CIO- and CISO-facing matters.