Cyber Defense Operations Lead with Security Clearance

Cyber Defense Operations Lead DCSA Cyber Program ICS Nett, Inc is seeking an experienced and highly motivated Cyber Defense Operations Lead to lead swing-shift (2.30 PM– 11.00 PM) operations within a 24x7x365 cyber defense environment in support of Department of Defense (DoD) missions. This is a fully on-site leadership position at Quantico, VA As the senior on-shift leader during swing-shift hours, the Cyber Defense Operations Lead is responsible for the direction, coordination, and continuous readiness of the Security Operations Center (SOC) during their assigned shift, ensuring seamless monitoring, threat hunting, and incident response. The successful candidate will lead a swing-shift team of Cyber Defense Analysts, Threat Hunters, and Incident Responders, drive operational excellence, and ensure clean shift-to-shift handoffs that sustain uninterrupted 24x7x365 coverage — including weekend and holiday rotations.
Position Description: The Cyber Defense Operations Lead directs and sustains cyber defense operations during the swing shift (2.30 PM – 11.00 PM) as part of a continuous 24x7x365 SOC. This position is accountable for the health, performance, and readiness of the SOC during assigned hours, overseeing shift personnel, processes, and enterprise tools such as SIEM, SOAR, CrowdStrike, CyberArk, and Endpoint Security Suite (ESS).
The Operations Lead will:
• Provide leadership, direction, and oversight to the swing-shift team of analysts, threat hunters, and incident responders, including on weekends and holidays
• Ensure seamless shift-to-shift handoffs with the incoming and outgoing shifts to guarantee continuity of the 24x7x365 operation
• Serve as the senior on-shift escalation point for critical and high-severity cyber incidents during swing-shift hours, driving coordination through resolution
• Interface with government leadership, JFHQ-DODIN, and cross-functional stakeholders on operational status, incidents, and reporting during the shift
• Execute, refine, and enforce standard operating procedures (SOPs), playbooks, and shift-handoff protocols
• Monitor SOC metrics, key performance indicators (KPIs), and service-level objectives during the shift, and report on operational health to senior leadership
Minimum Requirements: • At least five (5) years of hands-on technical cybersecurity experience, with at least two (2) years in a cyber operations lead, SOC lead, or supervisory role, and knowledge of Computer Network Defense concepts, incident response, DISA Security Technical Implementation Guides (STIGs), DoD A&A Process, NIST SP 800-53, NIST SP 800-61, CJCSM 6510.01B, United States Cyber Command guidelines, and other applicable DoD Cyber Security and Computer Network Defense policies.
• Demonstrated experience leading or overseeing SOC or cyber defense operations within a 24x7x365 environment, including shift-handoff management and continuity of operations.
• Active Top Secret Clearance REQUIRED, eligible to be upgraded to TS/SCI.
• Bachelor's degree in Information Technology, Information Systems Management, Cyber Security, or equivalent experience.
• Must meet DoD 8570 certification requirements at time of hire — IAT Level II or higher (e.g., CCNA Security, CySA+, GICSP, GSEC, Security+, SSCP; CISSP/CISM strongly preferred for leadership); CSSP Manager or Incident Responder certification (e.g., CISM, CISSP-ISSMP, GCIH, CSIH) preferred.
• Must be flexible to the swing shift 2.30 PM – 11.00 PM hours, including weekend and holiday rotations, fully on-site at Quantico, VA, and to respond to critical events on-call as needed to sustain continuous operations.
Required Skills:
• Operations Leadership: Direct and sustain cyber defense operations during the 24x7x365 CSOC operations, ensuring readiness and coverage during assigned hours, weekends, and holidays.
• Team Leadership: Lead, mentor, and develop the swing-shift team of Cyber Defense Analysts,and Incident Responders; conduct oversight and skills development.
• Shift Continuity & Handoffs: Execute and enforce seamless shift-to-shift handoff procedures to ensure situational awareness and continuity across the 24x7x365 cycle.
• Incident Command & Escalation: Serve as senior escalation authority for critical incidents; coordinate response, drive resolution, and manage communications during high-severity events.
• Process & Governance: Apply, refine, and enforce SOPs, incident response playbooks, and operational governance to maintain a strong, consistent security posture.
• Metrics & Reporting: Track SOC KPIs, service-level objectives, and operational health during the shift; deliver daily/weekly/monthly/quarterly reports and shift summaries to senior leadership and the customer.
Work Environment and Physical Demands: • This is a fully on-site position at DCSA facilities, Quantico, VA. • Must work the assigned swing shift (2.30 PM – 11.00 PM) and support weekend and holiday coverage as scheduled.
• Must be able to communicate complex technical ideas to a diverse customer base, both verbally and in written form.