Sr. Cyber/Cloud Security Specialist

Role Summary

A senior cybersecurity specialist with expertise in security operations, incident response, and threat management oversees the agency's IT security program. This role involves directing cybersecurity operations, advising executive leadership on emerging threats, and coordinating incident handling and mitigation strategies. The position requires a highly experienced professional capable of influencing security posture across technical teams and external partners.

Responsibilities

• Lead the agency’s Cybersecurity Operations (SECOPS) to support overall IT security and incident management efforts.
• Develop, recommend, and implement cybersecurity policies and procedures in coordination with agency leadership.
• Advise the Chief Information Security Officer (CISO) on emerging cyber threats, vulnerabilities, and mitigation techniques.
• Oversee security incident handling and response activities, including managing Security Information and Event Management (SIEM) systems and incident response playbooks.
• Monitor and evaluate security operations metrics, recommending improvements to enhance operational efficiency.
• Coordinate with external cybersecurity entities such as CISA and CYBERCOM on incident response and threat intelligence sharing.
• Manage vulnerability assessments, configuration management, and threat mitigation strategies to strengthen security defenses.
• Support governance, risk, and compliance (GRC) activities by providing threat analysis and security posture reports.
• Facilitate security best practices with development and infrastructure teams to ensure secure web and cloud environment configurations.
• Advocate for continuous monitoring and remediation using industry-standard tools, ensuring proactive cyber defense measures.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Assurance, or related field.
• 12+ years of relevant experience in cybersecurity, information security, or a comparable role.
• Proven experience as a SOC manager, senior analyst, or team lead with a focus on incident response and vulnerability management.
• Demonstrated ability to lead security operations, support CISO decision-making, and influence security practices across technical teams.
• Extensive knowledge of security tools including SIEM, endpoint detection and response (EDR), web application security, and cloud security platforms such as Azure and Microsoft 365.
• Familiarity with web application security testing, API auditing, and database security (SQL, Oracle).
• Experience coordinating with external cybersecurity agencies and managing incident response workflows.
• Strong analytical skills, with the ability to evaluate complex security configurations and incident scenarios.
• Security certifications such as CISSP, GCIH, OSCP, or similar are preferred.
• Ability to obtain and maintain required security clearances and public trust clearance.

Publishing Pay Range: $70.00 – $75.00 USD Hourly

This position offers a hybrid schedule, with time split between the office and remote work.