This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
The Cybersecurity Team Lead provides technical leadership, strategic direction, and operational oversight for enterprise cybersecurity engineering and security operations. This role is responsible for protecting critical infrastructure, systems, networks, and data across on-premises and cloud environments within a highly regulated federal IT environment. The Cybersecurity Team Lead ensures the confidentiality, integrity, and availability of enterprise systems by implementing robust security architectures, leading incident response efforts, managing security technologies, and maintaining compliance with federal security and regulatory requirements. This position plays a key role in enabling secure enterprise hosting, network operations, scientific computing, and cloud platform services.
Job Responsibility:
Lead the design, implementation, and operation of enterprise cybersecurity technologies and solutions
Develop and maintain the organization’s cybersecurity roadmap aligned with evolving threats, mission needs, and regulatory requirements
Oversee security operations, including monitoring, alerting, incident response, escalation, and post-incident root cause analysis
Manage and optimize security technologies such as firewalls, intrusion detection/prevention systems (IDS/IPS), endpoint detection and response (EDR), SIEM, SOAR, vulnerability scanning tools, and network access control solutions
Ensure effective security monitoring across networks, servers, cloud environments, endpoints, and applications
Lead vulnerability management activities, including scanning, risk prioritization, remediation coordination, and reporting
Conduct and support risk assessments, threat modeling, and security architecture reviews for new and existing systems
Collaborate with infrastructure, network, hosting, and cloud teams to ensure secure system design and secure-by-default configurations
Support system authorization processes, including development and maintenance of security documentation such as system security plans (SSPs), POA&Ms, and related artifacts
Ensure compliance with applicable federal security frameworks, policies, and standards (e.g., FISMA, NIST, agency security requirements)
Contribute to disaster recovery (DR) and continuity of operations (COOP) planning from a cybersecurity perspective
Serve as the primary technical escalation point for cybersecurity incidents and high-risk findings
Lead and mentor cybersecurity engineers and analysts, establishing standards, playbooks, and operational best practices
Coordinate with enterprise stakeholders and leadership to provide regular reporting on security posture, risk metrics, and incident trends
Support security tool evaluation, acquisition planning, and lifecycle management
Promote security awareness and foster a culture of proactive risk management across technical teams
Requirements:
Master's degree, One-and-one- half (1.5) years of additional experience can substitute for one (1) year of a typical degree program
Minimum 10 years of experience in cybersecurity engineering or security operations
Minimum 5 years of experience leading/coordinating a team of people delivering enterprise security initiatives in complex IT environments with 3,000+ users
Minimum 5 years of experience with at least 3 enterprise security technologies (e.g., firewalls, SIEM, IDS/IPS, EDR, vulnerability management tools)
Minimum 3 years of experience working in regulated federal environments with document exposure to security frameworks such as NIST 800-53, RMF, FISMA, or FedRAMP
Must be a US Citizen who can obtain a Public Trust Security Clearance
Nice to have:
Demonstrated experience producing security documentation and communicating findings including, vulnerability findings, security assessment reports, POA&Ms, and executive briefings or technical presentations
Industry certifications such as CISSP, CISM, CISA, CEH, GIAC, or Security+
Experience supporting system authorization and Risk Management Framework (RMF) processes
Experience securing hybrid cloud environments
Familiarity with DevSecOps and secure SDLC practices
Experience working in a federal or highly regulated environment