Security Lead (Transition & Run)

• Partner with security leadership teams to provide day-to-day cybersecurity oversight.
• Review and monitor overnight SOC alerts and security incidents.
• Monitor security dashboards, SIEM health, endpoint protection, and critical security controls.
• Review vulnerability scan results and prioritize remediation activities.
• Coordinate with infrastructure, application, network, and IAM teams to resolve security issues.
• Track patch management activities and validate remediation of critical vulnerabilities.
• Review and approve security exceptions and change requests.
• Participate in project discussions to ensure security controls are incorporated throughout solution design.
• Prepare and present regular status reports covering security metrics, risks, blockers, and remediation activities.
• Monitor privileged access activities, PAM alerts, emergency access, and administrative privilege changes.
• Oversee endpoint security (EDR/AV) exceptions and ensure appropriate compensating controls are implemented.
• Validate incident readiness, escalation paths, and incident response processes.
• Review emerging cybersecurity threats and recommend proactive mitigation strategies.
• Conduct regular security risk review meetings with technical teams.
• Monitor third-party security service providers and ensure SLA compliance.
• Communicate security advisories, maintenance activities, and high-risk findings to stakeholders.

• Security Architecture
• Governance, Risk & Compliance (GRC)
• Identity & Access Management (IAM)
• Firewall Architecture
• Cyber Threat Intelligence
• Vulnerability Assessment & Penetration Testing
• Security Project Management
• Security Operations Center (SOC)

• Lead and oversee enterprise security operations.
• Manage relationships with external SOC providers and security vendors.
• Ensure accurate classification and prioritization of security vulnerabilities.
• Drive timely remediation through risk-based prioritization.
• Develop security operational plans, reporting metrics, and governance processes.
• Exercise sound judgment during security incidents and critical operational events.

• Develop and maintain enterprise cybersecurity strategies and roadmaps.
• Evaluate security programs and identify opportunities for continuous improvement.
• Lead cybersecurity initiatives and enterprise security projects.
• Research emerging threats, technologies, and security best practices.
• Maintain cyber incident response plans and disaster recovery readiness.
• Conduct tabletop exercises and support forensic investigations when required.

• Develop, implement, and maintain cybersecurity policies, standards, and procedures.
• Ensure compliance with internal security requirements and industry regulations.
• Coordinate security audits and compliance assessments.
• Develop cybersecurity awareness and training programs.
• Produce executive-level reports that communicate security risks and recommendations.
• Promote continuous improvement and adoption of cybersecurity best practices across the organization.

• Cybersecurity Governance
• Risk Management
• Compliance Oversight
• Security Operations
• Security Incident Management
• Vulnerability Management
• SIEM Monitoring
• Security Metrics & Reporting

• Security Compliance Frameworks
• Identity & Access Management (IAM)
• Security Architecture
• SOC Operations
• Firewall Security
• Endpoint Detection & Response (EDR)
• Privileged Access Management (PAM)
• Threat Intelligence
• Penetration Testing
• Security Audits
• Security Awareness Training

• Strong experience leading enterprise cybersecurity operations and governance.
• Hands-on experience with SIEM, SOC operations, vulnerability management, and incident response.
• Expertise in Governance, Risk & Compliance (GRC).
• Experience collaborating with infrastructure, cloud, networking, application, and IAM teams.
• Strong understanding of cybersecurity frameworks, security controls, and industry best practices.
• Excellent communication, stakeholder management, and leadership skills.
• Ability to manage multiple priorities in a fast-paced enterprise environment.

• Experience leading enterprise security transformation initiatives.
• Knowledge of cloud security across Azure, AWS, or GCP environments.
• Familiarity with security automation, threat intelligence, and forensic investigations.
• Industry certifications such as CISSP, CISM, CISA, Security+, or equivalent are highly desirable.

Government Careers