Oversee and guide cybersecurity program performance, recommending improvements and major technical changes.
Supervise engineering teams and oversee junior staff performance.
Independently perform functional duties across high-impact assignments.
Security Infrastructure Engineering
Engineer, implement, and maintain cybersecurity infrastructure, including:
IDS/IPS, firewalls, perimeter defenses
Endpoint Security System (ESS)
Assured Compliance Assessment Solution (ACAS)
SIEM technologies (e.g., ArcSight)
Network monitoring and forensic toolsets
Zero Trust–aligned technologies
Security Operations & Monitoring
Provide 24/7/365 monitoring, security analysis, event correlation, incident response, and penetration testing.
Monitor tools to detect and mitigate internal/external threats including malware, web attacks, unauthorized access, and data exfiltration.
Maintain real-time situational awareness across all assigned enclaves.
Incident Response
Serve as central point of contact for Computer Emergency Response.
Perform incident investigation, reporting (internal/external), coordination, and resolution.
Ensure compliance with DoD Computer Emergency Response Team (DoD-CERT) directives.
Vulnerability & Patch Management
Operate and manage enterprise vulnerability scanning solutions (e.g., ACAS).
Perform monthly scans, IAVA management, remediation actions, and reporting.
Maintain secure configuration baselines using DISA STIGs and NSA guidelines.
Execute SRRs/security scans and validate compliance.
Security Engineering Lifecycle Support
Review and approve all new equipment and system deployments across enclaves.
Configure hardware/software for DoD-approved ports, protocols, and services (PPS).
Perform security audits for servers, endpoints, network devices, and infrastructure components.
Maintain continuous compliance with DoD Evaluation Scoring Metrics and JFHQ-DODIN guidance.
Cybersecurity Program Implementation
Establish and maintain a cybersecurity program that aligns with
DoDI 8500.01 (Cybersecurity)
DoDI 8510.01 (RMF)
DoDD 8140.01 (Cyberspace Workforce Management)
DoD 8570.1-M
CJCSM 6510.01
DoD Zero Trust requirements
STIGs and IAVA directives
Plans, Policies, and Documentation
Develop and maintain documentation including
Plan of Action and Milestones (POA&M)
Acceptance of Risk (AOR)
Security Override Letters (SOL)
Configuration Management documentation
Network and system architecture designs
Cybersecurity policies and procedures
Compliance inspection reports
Enterprise Compliance & Reporting
Ensure confidentiality, integrity, and availability of all Government systems and data.
Report vulnerabilities and non-compliance findings to the Government with corrective action plans and timelines.
Implement a change control process preventing unauthorized system or network modifications.
Functional Areas Supported
The CSSP Engineering Team Lead oversees and supports the following primary functional areas:
Security Infrastructure Engineering Services
Security Event Monitoring & Analysis
Cyber Incident Response
Audit Support & Compliance Guidance
Security Analysis & Reporting
Cybersecurity Policy Review
Program Operations & Planning
Information Assurance Vulnerability Management
Mission Cloud & On-Premises Security Implementation
Emerging Technology Assessments & Process Improvements
Desired Skills
Expert-level understanding of DoD and DISA cybersecurity architecture, tools, and compliance frameworks.
Proven ability to lead large security engineering teams and 24/7 operations centers.
Strong technical depth in SIEM, IDS/IPS, ACAS, ESS, endpoint security, Zero Trust, and secure configuration.
- Ability to interface with senior Government leadership and communicate complex technical concepts clearly.
- Education & Experience
- Minimum Education
Bachelor’s degree required.
MA/MS degree preferred.
Minimum General Experience
- Eight (8) years of progressive experience in IT engineering, platform operations, network engineering, or a closely related IT management discipline involving oversight of large, complex, multi-site programs
- Certifications
- Project Management Professional (PMP) or equivalent – REQUIRED
Relevant commercial certifications (e.g., ITIL, Agile, CISSP, CSM) – desired
- Must maintain all mandatory certifications
- Security Clearance
- Must be a U.S. Citizen.
Selective Service registration required (if applicable).
Top Secret Security Clearance required
- Must maintain fitness and eligibility for national security positions
- Other (Travel, Work Environment, DoD 8570 Requirements, Administrative Notes, etc.)
- Onsite at customer location
