Cybersecurity / Task Order Lead

Strategic Operational Solutions (STOPSO) is seeking a Cybersecurity / Task Order Lead to support the Department of Justice (DOJ), Executive Office for Immigration Review (EOIR), Office of Information Technology (OIT). This position serves as the senior technical authority and on-site lead for EOIR's IT Security Support Services program, providing oversight across incident response, security operations, vulnerability management, insider threat activities, cybersecurity reporting, and compliance initiatives. The Lead supervises contractor personnel, coordinates with EOIR leadership, and serves as the primary technical advisor supporting the Chief Information Security Officer (CISO) organization.

Responsibilities:

• Lead daily activities of the contractor cybersecurity team supporting EOIR.

• Serve as EOIR's primary contractor incident response lead and coordinate security investigations, incident analysis, containment recommendations, recovery support, lessons learned activities, and executive reporting.

• Coordinate with EOIR, Justice Security Operations Center (JSOC), DOJ cybersecurity personnel, Privacy Office, and Office of General Counsel regarding cybersecurity incidents and investigations.

• Oversee vulnerability management activities including vulnerability scanning, remediation tracking, POA&M management, KEV monitoring, VPR tracking, and monthly enterprise vulnerability reporting.

• Serve as lead reviewer for vulnerability prioritization and remediation recommendations.

• Support insider threat monitoring, analytics, risk identification, user behavior analytics oversight, and coordination with DOJ insider threat stakeholders.

• Provide oversight of insider threat reporting and investigation support activities.

• Produce and deliver executive cybersecurity briefings for the EOIR CIO and CISO.

• Support daily executive roll-up reporting and weekly cybersecurity posture reporting.

• Maintain familiarity with CSAM/JCAM workflows and ensure accurate documentation of cybersecurity compliance activities, POA&Ms, assessments, and remediation actions.

• Support cybersecurity governance, policy development, compliance reviews, and security planning activities.

• Manage task assignment, workload balancing, and performance oversight of Junior Security Specialists.

• Support contract management activities, status reporting, deliverables tracking, and quality control efforts.

• Coordinate with the Government Task Manager (GTM), Contracting Officer Representative (COR), EOIR CISO, and other stakeholders.

• Participate in monthly program reviews and executive briefings.

Supervisory Duties:

• Supervise assigned team members.

Qualifications:

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, Engineering, or related discipline.

• Minimum 5 years of cybersecurity experience supporting federal agencies.

• Minimum 3 years of experience in cyber incident response, vulnerability management, or security operations center (SOC) activities.

• Experience supporting federal incident response and cybersecurity operations programs.

• Experience supporting vulnerability management programs utilizing Tenable, Nessus, BigFix, Splunk, or similar enterprise platforms.

• Experience coordinating with federal cybersecurity organizations such as SOCs, Security Operations Centers, CISA, DOJ components, or equivalent organizations.

• Experience preparing and delivering executive cybersecurity briefings.

• Experience supporting FISMA compliance activities and cybersecurity governance programs.

• Experience developing cybersecurity policies, procedures, plans, and executive briefings.

• Ability to obtain and maintain a DOJ Public Trust clearance.

• U.S. Citizenship required.

Preferred Skills:

• Strong knowledge of NIST Cybersecurity Framework and NIST 800-series publications.

• Knowledge of FISMA, OMB Circular A-130, and federal cybersecurity requirements.

• Experience with threat hunting, incident analysis, malware investigations, and vulnerability remediation.

• Ability to analyze and correlate security event data from multiple sources.

• Strong written and verbal communication skills.

• Experience preparing executive-level reports, briefings, and cybersecurity metrics.

• Ability to lead technical teams in fast-paced, mission-critical environments.

• Strong analytical and problem-solving skills.

• Experience supporting enterprise cybersecurity operations within regulated federal environments.

• Proficiency with Microsoft Word, Excel, PowerPoint, and SharePoint.