Cybersecurity Operations Lead at Unissant in Bethesda, MD, USA

Job description

• We are seeking a Cybersecurity Operations Lead to join our team and support our client. The ideal candidate is a hands-on cybersecurity operations leader who thrives in large, complex enterprise environments and brings strong experience across security operations, vulnerability management, incident response, and operational governance. This individual is energized by building mature processes, leading technical teams, and using automation, analytics, and modern security tools to strengthen mission performance and reduce risk.

Responsibilities

• Lead operational cybersecurity functions across service areas, ensuring consistent execution, risk reduction, and continuous improvement.
• Oversee vulnerability management, configuration management, asset management, security operations, and incident response activities.
• Drive the integration and operational use of enterprise security tools, dashboards, and automation capabilities.
• Support compliance with federal cybersecurity requirements and strengthen operational alignment with established standards and policies.
• Guide teams in prioritizing remediation activities, improving visibility, and standardizing security operations across the environment.
• Coordinate with stakeholders to manage priorities, escalations, and enterprise-wide operational challenges.
• Develop and refine SOPs, workflows, reporting methods, and performance metrics to improve program maturity.
• Promote the use of automation, analytics, and AI/ML-enabled capabilities to reduce manual effort and improve decision-making.

Requirements

• 7–10 years of hands-on security operations experience in large-scale, hybrid enterprise environments.
• 5+ years of experience leading or supervising teams supporting Security Operations, Vulnerability Management, Incident Response, or SOC functions.
• 3–5 years of experience supporting Federal cybersecurity programs, FISMA systems, and NIST operational control implementation.
• Deep experience with vulnerability management, configuration compliance, enterprise asset visibility, and security operations tooling.
• Hands-on experience with platforms such as Splunk, ServiceNow SecOps, EDR tools, ForeScout, Power BI, Power Apps, and related automation frameworks.
• Strong knowledge of Zero Trust, TIC 3.0, NIST guidance, cloud security frameworks, and modern cyber operations practices.
• Demonstrated ability to lead multidisciplinary teams, communicate with technical and executive stakeholders, and operate effectively in fast-moving federal environments.
• Bachelor's Degree is required. Preferred field of study in Computer Science, Information Technology, Information Systems, Operations Management, or related field of study.
• MBA/Master's Degree in a relevant field of study preferred.
• Excellent verbal and written skills, ability to present proposals and performance data, comfortable interfacing all levels of organization.
• Ability to write clear and concise creative content in a highly confidential manner.
• Ability to obtain and maintain a Public Trust clearance.
• Desired certifications include CISSP, GIAC certifications (such as GCIA, GCIH, GCFA, GSEC, GCCC, GCED, GRID, or GMON), and Security+ CE.
• Splunk Certified Power User or Admin, ITIL Foundation, AWS or Azure Security Engineer certifications, and Machine Learning or AI practitioner certifications are considered a plus.

Skills

Required

• Hands-on security operations
• Vulnerability management
• Configuration compliance
• Enterprise asset visibility
• Security operations tooling
• Splunk
• ServiceNow SecOps
• EDR tools
• ForeScout
• Power BI
• Power Apps
• Automation frameworks

Preferred

• CISSP
• Security+ CE
• Splunk Certified Power User or Admin
• ITIL Foundation