Description of Duties:

The Test Event Cybersecurity Lead supports the Missile Defense Agency (MDA) on the Integrated Research and Development for Enterprise Solutions (IRES) contract.

The candidate will:

Manage engineers and ISSOs to deliver defensive cyber operations, vulnerability lifecycle management, and security posture monitoring across mission environments. Be responsible for the overall health and cybersecurity of the test event packages, managing the team by assigning work, goals, and priorities, vulnerability scanning via ACAS, endpoint protection, and compliance enforcement aligned with DoD Risk Mals, and prioritim, vulnerability scanning.

Key Responsibilities:

Architect and manage cybersecurity processes, oversee construct of operational monitoring dashboards, and assist with complex query-based threat hunting across log repositories. Develop and task the scheduling and running of credentialed ACAS vulnerability scans; correlate scan findings, track remediation timelines, and generate technical remediation tickets. Implement, verify, and document

DISA STIGs:

manage system configurations and enforce Ports, Protocols, and Services Management (PPSM) baselines. Support Continuous Monitoring and authorization packages throughout the DoD Risk Management Framework (RMF) lifecycle steps (NIST

SP 800-37 / 800-53

). Triage and contain operational security anomalies, conduct preliminary root-cause forensics and support defensive cyber reporting. Oversee engineers working within Python, PowerShell, or Bash to automate administrative tasks, parse security logs, and streamline scan analysis. Oversee engineers working within ELK Stack (Elasticsearch, Logstash, Kibana) or equivalent centralized log aggregation platforms. Oversee engineers working within VMware vSphere / ESXi virtualized infrastructures and automated configuration management using Ansible. Oversee firewall rule management, network access control lists (ALs), and traffic analysis. Rapid response to high-priority cybersecurity alerts outside standard operational hours when on rotation. Interface directly with System Administrators, ISSMs, and Network Engineers to validate patches and mitigate identified vulnerabilities, Maintain audit readiness for Command Cyber Readiness Inspections (CCRI) and external cybersecurity assessments. Be able to schedule and manage a team of engineers to support test events, to include off core hour support. Respond and triage any Cyber Tasking Order (CTOs) that apply to the managed packages.

Basic Requirements:

Must have 6, or more, years of general (full-time) work experience (May be reduced with completion of advanced education). Must have 4, or more, years of directly related experience Must have 6, or more, months of experience working in a management or leadership role Must have proven hands-on experience with a Security Information and Event Management (SIEM) platform. This includes managing data ingestion, building security monitoring dashboards, and performing query-based analysis of security events Must have experience with an Endpoint Detection and Response (ED) or Endpoint Protection Platform solution (e.g. ESS (Trellix), Microsoft Defender for Endpoint). 

ACAS & Vulnerability Management Experience:

Must have current ACAS certificate, performing vulnerability scans using ACAS (Tenable SecurityCenter/Nessus) Must have the flexibility to participate in an on-call rotation and respond to security incidents outside of standard business hours as needed. Must be familiar and experience with both Windows and Linux OS Must be compliant with DoD 8570/8140 IAT Level Il at a minimum (e.g., CompTIA Security+ CE, CySA+, GSEC). Must have an active DoW Secret Security Clearance.

Desired Requirements:

Have a strong working knowledge of the DoD Risk Management Framework (RMF) lifecycle. Have experience with the ELK Stack (Elasticsearch, Logstash, and Kibana) or similar log aggregation and monitoring tools is highly desirable. Have experience applying and verifying

DISA STIG

(Security Technical Implementation Guides) and be familiar with Ports Protocol and Services Management (PPSM). Be proficient in a scripting language (e.g., Python, Powershell, Bash) for automating administrative and security tasks. Have experience with virtualization platforms, particularly VMware (vSphere, ESXi), Ansible etc. Have a current IAT level III certification.

Benefits:

401(k) 401(k) matching Dental insurance Flexible schedule Health insurance Life insurance Paid time off Tuition reimbursement Vision insurance

Work Location:

In person