Security Operations Manager

Empower AI Inc.•Washington, DC

1d•Onsite

About The Position

Empower AI is seeking a Security Operations Manager to lead a team of approximately 10 technicians responsible for the Operations and Maintenance (O&M) of mission-critical IT systems for the Department of State, Consular Affairs (CA). This role involves maintaining the security posture of the CA production system in compliance with Department of State Information Assurance and Compliance policies, supporting 10,000 users across 230 overseas posts, 29 domestic passport agencies, and multiple data centers. The manager will oversee daily operations, manage security monitoring, POA&M remediation, incident response, security posture assessments, centralized logging, threat analysis, and patching. The position requires collaboration with various stakeholders, technical ownership of tasks, and effective communication.

Requirements

BA/BS in business management or related discipline or equivalent experience.
Possess a Top Secret clearance.
Possess a Certified Information Systems Security Professional (CISSP) certification.
A minimum of five (5) years of experience with all phases of IA and accreditation processes, securing IT systems and services using Government and industry IA standards, policies, guidelines, and best practices.
Demonstrated experience managing and leading a security operations staff with skills applicable to a project environment similar in size and scope.
Demonstrated experience successfully managing information security risks to include completing the entire A&A process including receiving Authority to Operate (ATO) for the cloud.

Nice To Haves

Demonstrated experience with encryption devices and procedures as they relate to networks and data.

Responsibilities

Serve as the Security Operations team leader for operational activities required to maintain the CA production system security posture in compliance with the Department of State Information Assurance and Compliance policies.
Responsible for the day-to-day acquisition and asset management operations in the CA EOC.
Support the Assessment & Authorization (A&A) process in coordination with CA/CST’s ISSO team, including managing security monitoring, POA&M remediation, maintaining standard security configurations, managing incident response, supporting security posture assessment and cyber hygiene activities, managing centralized logging and threat analysis, and ensuring consistent, comprehensive and timely patching.
Perform and/or review technical security assessments of computing environments to identify vulnerabilities and non-compliance, and recommend mitigation strategies.
Provide technical and management support for training and certifying personnel to execute assessments.
Validate and verify system security requirements definitions and analysis and establish system security designs.
Provide technical and management support for vulnerability assessments and defense assessments.
Design, develop, implement and/or integrate security systems and system components.
Support the building of security architectures.
Assess and mitigate system security threats/risks throughout the program lifecycle.
Provide technical and management support to sustain CA infrastructure, data, and processes.
Collaborate with Engineers, Project and Product Managers to acquire and manage infrastructure assets.
Meet deadlines and satisfy requirements from other Engineers and Project Management.
Provide coordination between resource managers/supervisors and ensure necessary reviews and approvals are received.
Communicate effectively and efficiently across all CA stakeholders.
Take technical ownership of tasks and work independently.
Perform related duties as assigned.