Director, Cyber Operations

ECS Federal•ARLINGTON, VA

1d•Hybrid

About The Position

Everforth ECS is seeking an experienced Director, Cyber Operations to support the TESS program and advance cyber operations opportunities across the ECS CISA account. Based in Arlington, Virginia, this hybrid role engages senior federal leaders to identify operational challenges and help customers understand how cyber defense capabilities work together to achieve broader mission outcomes. The Director builds trusted customer relationships, aligns stakeholders, and leads cyber mission operations and cyber solutions subject matter experts in translating mission needs into actionable recommendations and solutions that improve the effectiveness and efficiency of CISA’s cyber capabilities. The ideal candidate has developed from practical cybersecurity operations experience, such as SecOps or SOC work, into senior cybersecurity leadership. They have led managers, subject matter and cyber mission experts, and multidisciplinary teams, and understand how large-scale cybersecurity operations, threat intelligence, incident response, threat hunting, vulnerability management, and supporting technologies work together. The Director uses operational credibility and customer, delivery, and executive relationships to build demand for improvements and move initiatives forward. They collaborate with solutions architects, engineering specialists, and other technical experts on detailed solution design, and provide cyber operations expertise, customer insight, and strategic guidance to related pursuits and emerging opportunities across the ECS CISA account.

Requirements

U.S. citizenship, as required by contract.
Active Top Secret clearance and ability to obtain DHS Entry on Duty (EOD)/Public Trust approval.
At least 15 years of related experience.
Substantial, progressively responsible experience in large-scale cybersecurity operations, including a practical foundation in leading or running a Security Operations Center (SOC), cyber defense, incident response, threat intelligence, or a comparable operational environment.
Progression into senior leadership, including experience leading managers, technical leads, or multidisciplinary teams responsible for cyber operations.
Experience supporting complex federal cybersecurity missions and engaging directly with senior government leaders.
Broad understanding of cyber defense capabilities and their operational relationships, including detection and response, threat intelligence, threat hunting, vulnerability management, detection engineering, security telemetry, and automation.
Demonstrated ability to earn executive trust, establish relationships across organizational boundaries, and influence decisions through operational credibility and sound judgment.
Experience identifying underlying customer problems, facilitating stakeholder alignment, and building support for actionable recommendations.
Ability to assess technical and operational tradeoffs, challenge assumptions, and guide solution discussions in partnership with architects and engineering specialists.
Experience translating mission priorities into operational strategies, roadmaps, requirements, resource recommendations, or measurable improvements.
Strong executive communication, facilitation, team leadership, and collaboration skills.
Depth in one or more cyber operations disciplines and breadth to lead across multiple functions; expertise in every domain, platform, or tool is not expected.

Responsibilities

Establish and sustain relationships with senior government leaders and mission stakeholders, and lead discussions about operational priorities, capability gaps, dependencies, and desired outcomes.
Help customer leaders understand the relationships among cyber defense functions, teams, services, and technologies, and identify opportunities for better integration, information sharing, and coordination.
Identify root causes, organizational barriers, and cross-functional challenges behind customer requests, and translate discussions into clearly defined problems, priorities, and improvement opportunities.
Build stakeholder alignment and customer commitment by explaining recommended approaches, helping evaluate tradeoffs, resolving competing priorities, and establishing support for next steps.
Lead cyber mission operations and solution subject matter experts by setting priorities, providing direction, developing talent, holding SMEs and team leads accountable, and coordinating expertise across disciplines.
Guide development of mission-focused recommendations with TESS program leadership, solutions architects, capability leads, and technical teams; support specialists responsible for detailed architecture and engineering.
Work with TESS leadership and delivery teams to develop concepts of operations, capability roadmaps, requirements, staffing recommendations, and implementation priorities.
Advance approved operational improvements by addressing stakeholder concerns, adoption barriers, and dependencies, and establish measures of progress and mission impact with customer and program leaders.
Support CISA account pursuits through customer discovery, opportunity assessment, solution shaping, technical narratives, and executive presentations.
Coordinate with account, capture, solutions, and delivery leaders to develop credible approaches grounded in operational experience.
Lead briefings, workshops, and strategic discussions for executive and technical audiences to explain complex cyber operations issues and support informed decisions.