Technical Cybersecurity Manager

MetaPhase Consulting • Washington, DC

8d • Hybrid

About The Position

MetaPhase is seeking an experienced Technical Cybersecurity Manager with eight or more (8+) year of experience to support a high-impact federal transportation security program. This role will lead the systems, tools, controls, and technical team responsible for protecting complex mission environments, including cloud, on-premise, enterprise IT, and operational technology environments. The ideal candidate is a hands-on cybersecurity leader with deep experience managing technical security controls such as firewalls, data loss prevention systems, vulnerability scanning, penetration testing, patching, encryption, endpoint protection, system hardening, and security monitoring. This individual will provide highly technical and specialized guidance, develop solutions to complex security problems, prepare reports and presentations for senior leadership, and may serve as a contractor task order Project Manager.

Requirements

• Minimum of eight or more (8+) years of progressive experience in IT, cybersecurity, security engineering, systems engineering, infrastructure, cloud, or related disciplines.
• Minimum of six or more (6+) years of specialized experience across multiple advanced IT or cybersecurity disciplines involving a wide range of hardware and software solutions.
• Minimum of four or more (4+) years of concentrated, hands-on experience delivering cloud-related security services.
• Demonstrated experience managing technical cybersecurity systems, tools, controls, and the teams responsible for operating or supporting those systems.
• Strong knowledge across security architecture, engineering, operations, compliance, vulnerability management, incident response, identity/access, endpoint security, and security monitoring.
• Experience managing ATO documentation and ATO processes in federal environments.
• Experience supporting RMF, NIST 800-53, FISMA, FedRAMP, POA&M management, security control assessment, continuous monitoring, and audit evidence development.
• Experience with vulnerability scanning, penetration testing coordination, remediation planning, patch management, encryption, DLP, firewall rules, endpoint protection, and system hardening.
• Familiarity with SCADA, ICS, OT, connected device, or industrial cybersecurity concepts.
• Ability to analyze complex cybersecurity issues and develop practical, technically sound recommendations.
• Experience preparing formal reports, technical briefings, risk summaries, and executive presentations.
• Ability to work independently, lead teams, and collaborate across engineering, cybersecurity, cloud, infrastructure, program management, and federal stakeholder groups.

Nice To Haves

• GIAC Global Industrial Cyber Security Professional (GICSP) certification.
• CISSP, CISM, CCSP, CEH, Security+, CASP+, AWS Security Specialty, Azure Security Engineer, or equivalent certification.
• Prior experience supporting DHS, TSA, transportation security, airport operations, defense, law enforcement, critical infrastructure, or national security missions.
• Experience securing operational technology, industrial control systems, edge devices, connected equipment, or IoT/IIoT environments.
• Experience with SIEM, SOAR, EDR/XDR, CSPM, CNAPP, SAST/DAST, container security, cloud logging, and cloud-native security services.
• Experience supporting FedRAMP High, High/High/High FIPS systems, zero trust initiatives, or federal cloud migration programs.
• Experience managing technical teams in Agile, DevSecOps, SAFe, or hybrid federal delivery environments.
• Experience serving as a task order lead, technical lead, cybersecurity workstream lead, or contractor Project Manager.

Responsibilities

• Leading the technical cybersecurity team responsible for securing mission systems, cloud environments, on-premise infrastructure, and connected operational technology environments.
• Managing and overseeing security controls including firewalls, DLP, encryption, endpoint protection, vulnerability scanning, penetration testing, patch management, configuration hardening, security monitoring, and incident response support.
• Providing highly technical guidance and specialized cybersecurity solutions for complex security, architecture, engineering, and compliance challenges.
• Supporting cybersecurity engineering activities across system design, development, deployment, operations, maintenance, and modernization efforts.
• Managing security documentation and artifacts supporting ATO processes, including System Security Plans, Risk Assessments, Contingency Plans, POA&Ms, security packages, control implementation evidence, and continuous monitoring materials.
• Supporting RMF, FedRAMP, FISMA, NIST 800-53, DHS/TSA cybersecurity requirements, and federal security governance processes.
• Leading vulnerability management activities, including scan analysis, remediation planning, prioritization, tracking, reporting, and closure.
• Overseeing patch management, operating system hardening, STIG implementation, configuration management, and remediation of security weaknesses.
• Coordinating with ISSOs, system owners, architects, engineers, OEMs, infrastructure teams, cloud teams, and federal stakeholders to resolve technical security issues.
• Performing detailed technical analyses, security studies, risk assessments, root cause analysis, and cybersecurity impact assessments.
• Preparing reports, briefings, dashboards, and executive-level presentations for program leadership and upper management.
• Supporting cloud security services, including secure architecture, control implementation, monitoring, compliance, and remediation for cloud or hybrid environments.
• Supporting OT/IT convergence security, including environments involving connected devices, endpoint security, SCADA-adjacent concepts, industrial control considerations, and operational mission systems.
• Leading or contributing to incident response, critical incident management, after-action reviews, and corrective action planning.
• Serving independently or as part of an integrated Agile, DevSecOps, cybersecurity, engineering, or program management team.
• Potentially serving as a contractor task order Project Manager, including planning, staffing, schedule tracking, risk management, performance reporting, and stakeholder coordination.

Benefits

• MetaPhase Consulting is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, national origin, disability or veteran status, or any other factors protected by federal, state, or local law.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior