Director, Cyber Operations

ECS Tech Inc•Arlington, VA

2d•$275,000 - $350,000•Hybrid

About The Position

Everforth ECS is seeking an experienced cyber operations leader to support the TESS program and advance cyber operations opportunities across the ECS CISA account. The role engages senior federal leaders, identifies operational challenges, and helps customers understand how cyber defense capabilities connect to achieve broader mission outcomes. The Director builds trusted customer relationships, aligns stakeholders, and leads cyber mission operations and cyber solutions subject matter experts in translating mission needs into recommendations and solutions that improve the effectiveness and efficiency of CISA’s cyber capabilities. The successful candidate brings practical cybersecurity operations experience, such as SecOps or SOC leadership, and has progressed into senior leadership of managers, subject matter experts, and multidisciplinary teams. The role requires understanding how cybersecurity operations, threat intelligence, incident response, threat hunting, vulnerability management, and supporting technologies work together. The Director uses operational credibility and relationships with customers, delivery leaders, and ECS executives to build demand and support for improvements. They also collaborate with solutions architects, engineering specialists, and other technical experts on solution design, and provide operational expertise, customer insight, and strategic guidance to related pursuits and emerging opportunities across the ECS CISA account. The position is based in Arlington, Virginia, in a hybrid work arrangement. The stated salary range is $275,000–$350,000. U.S. citizenship is required by contract, along with an active Top Secret clearance and the ability to obtain DHS Entry on Duty/Public Trust approval.

Requirements

U.S. citizenship, as required by contract.
Active Top Secret clearance and ability to obtain DHS Entry on Duty (EOD)/Public Trust approval.
At least 15 years of related experience.
Substantial, progressively responsible experience in large-scale cybersecurity operations, with a practical foundation in leading or running a Security Operations Center (SOC), cyber defense, incident response, threat intelligence, or a comparable operational environment.
Progression into senior leadership, including experience leading managers, technical leads, or multidisciplinary teams responsible for cyber operations.
Experience supporting complex federal cybersecurity missions and engaging directly with senior government leaders.
Broad understanding of cyber defense capabilities and their operational relationships, including detection and response, threat intelligence, threat hunting, vulnerability management, detection engineering, security telemetry, and automation.
Ability to earn executive trust, establish relationships across organizational boundaries, and influence decisions through operational credibility and sound judgment.
Experience identifying underlying customer problems, facilitating stakeholder alignment, and building support for actionable recommendations.
Ability to assess technical and operational tradeoffs, challenge assumptions, and guide solution discussions in partnership with architects and engineering specialists.
Experience translating mission priorities into operational strategies, roadmaps, requirements, resource recommendations, or measurable improvements.
Strong executive communication, facilitation, team leadership, and collaboration skills.
Depth in one or more cyber operations disciplines and breadth to lead across multiple functions; expertise in every domain, platform, or tool is not expected.

Responsibilities

Establish and sustain relationships with senior government leaders and mission stakeholders; lead substantive discussions about operational priorities, capability gaps, dependencies, and desired outcomes.
Explain relationships among cyber defense functions, teams, services, and technologies, and identify opportunities for improved integration, information sharing, and coordination.
Identify root causes, organizational barriers, and cross-functional challenges behind customer requests; translate discussions into defined problems, priorities, and improvement opportunities.
Build stakeholder alignment and customer commitment around recommended approaches, helping evaluate tradeoffs, resolve competing priorities, and agree on next steps.
Lead cyber mission operations and solution subject matter experts by setting priorities, providing direction, developing talent, holding SMEs and team leads accountable, and coordinating expertise across disciplines.
Bring customer insights to TESS program leadership, solutions architects, capability leads, and technical teams; lead development of mission-focused recommendations with technical specialists supporting detailed architecture and engineering.
Work with TESS leadership and delivery teams to develop concepts of operations, capability roadmaps, requirements, staffing recommendations, and implementation priorities.
Advance approved operational improvements by addressing stakeholder concerns, adoption barriers, and dependencies, and establishing measures of progress and mission impact.
Support CISA account pursuits through customer discovery, opportunity assessment, solution shaping, technical narratives, and executive presentations; coordinate with account, capture, solutions, and delivery leaders.
Lead briefings, workshops, and strategic discussions for executive and technical audiences, making complex cyber operations issues understandable and supporting informed decisions.