Security Team Lead

About the role

The Security Lead is responsible for leading a team of security and network professionals to secure, maintain, and optimize enterprise network environments. This position ensures operational compliance with DoD, Defense Cyber Defense Command (DCDC), U.S. Cyber Command, DISA, and Zero Trust cybersecurity requirements while managing daily operations, project activities, and incident response efforts. The Security Lead also provides expert-level technical guidance for troubleshooting, system hardening, network security enforcement, and enterprise monitoring.

Key Tasks & Responsibilities

• Leadership & Team Management
• Serve as the primary technical lead for security operations and network security tasks.
• Provide guidance, mentorship, workload distribution, and quality assurance for the Security Team.
• Maintain current knowledge of emerging technologies, vulnerabilities, and best practices.
• Develop advanced documentation to include installation guides, maintenance procedures, troubleshooting steps, and security reports.
• Project & Program Support
• Plan, initiate, and manage IT security and infrastructure projects.
• Lead and guide technical staff across all project stages.
• Coordinate between technical and business stakeholders, ensuring accuracy and alignment with mission needs.
• Track progress to ensure deadlines, cost targets, compliance standards, and project deliverables are met.
• Security Infrastructure Support
• Lead troubleshooting for security infrastructure impacting mission-critical systems. Provide operational support, troubleshooting, and configuration for security technologies including, but not limited to:
• Firewalls
• Intrusion Detection/Prevention Systems (IDS/IPS)
• DNS and DNSSEC
• Reverse and Web Proxies
• Load Balancers
• Zero Trust Network Architecture (ZTNA) components
• Web/URL filtering technologies
• Monitoring & Analysis
• Conduct continuous monitoring of firewall, IPS/IDS, DNSSEC, proxy, and other security device logs.
• Perform network traffic analysis to identify anomalies, threats, and compliance gaps.
• Support Security Operations Center (SOC) workflows and incident response activities.
• Cybersecurity Compliance
• Apply DISA STIGs, NSA guidance, and DoD security directives to maintain secure configurations.
• Implement security patching and configuration management processes.
• Conduct Security Readiness Reviews (SRRs) and validate secure baselines using ACAS/MECM (ACAS is final validation).
• Follow DoD CERT directives and security advisories.
• Reporting & Remediation
• Identify, document, and report vulnerabilities or compliance gaps.
• Prepare and update POA&Ms, Acceptance of Risk (AOR), and Security Override Letters (SOL).
• Recommend corrective actions, track progress, and provide timelines for mitigation.
• Change Control & Configuration Management
• Implement and adhere to change control processes to prevent unauthorized changes.
• Ensure all network and security devices meet customer/DoD criteria for ports, protocols, and services (PPS).
• Maintain secure baselines for all hardware, software, and services supported under this contract.

Education & Experience

• Minimum Education
• Bachelor's degree in a related field required.
• Minimum General Experience
• Eight (8) years of experience in Information Technology.
• At least five (5) years of experience as a Security Administrator or in a similar technical role, or a closely related IT discipline involving oversight of large, complex, multi-site programs.

Certifications

• CISSP or equivalent required
• Information Assurance Technical (IAT) II required
• Computing Environment (CE) certification relevant to Microsoft, Linux, Cloud, or other privileged access technologies (required)
• ITIL Required
• Must maintain all mandatory certifications

Security Clearance

• Must be a U.S. Citizen.
• Selective Service registration required (if applicable).
• Top Secret Security Clearance required
• Must maintain fitness and eligibility for national security positions

Other (Travel, Work Environment, DoD 8570 Requirements, Administrative Notes, etc.)

• Onsite at customer location