Director, Cyber Operations

Everforth ECS is seeking a Director, Cyber Operations to join our team in Arlington, VA (Hybrid).

Everforth ECS is seeking an experienced cyber operations leader to support the TESS program and advance cyber operations opportunities across the ECS CISA account.

Within TESS, this individual will engage senior federal leaders, identify operational challenges, and help customers understand how their cyber defense capabilities connect to achieve broader mission outcomes. They will build trusted relationships across the customer organization, facilitate alignment among stakeholders, and lead a team of cyber mission operations and cyber solutions subject matter experts in translating mission needs into actionable recommendations and solutions that improves the effectiveness and efficiencies of CISA’s cyber capabilities.

The ideal candidate has progressed from practical cybersecurity operations (SecOps/SOC) into senior cybersecurity leadership, including leading leaders, subject matter and cyber mission experts, and multidisciplinary teams. They understand how large-scale cybersecurity operations, cyber threat intelligence, incident response, threat hunting, vulnerability management, and supporting technologies work together to improve cyber defense effectiveness and efficiency of SecOps and SOC teams. They have led teams responsible for designing, implementing, and advancing cyber SecOps/SOC capabilities and solutions, while improving how organizations and teams collaborate and operate across organizational boundaries, processes, and competing priorities.   

This leader will use operational credibility and mission, customer, delivery leadership, and ECS executive relationships to build customer demand and support for improvements and move initiatives forward. Leader will also collaborate with and lead solutions architects, engineering specialists, and other technical experts will support detailed solution design.

In addition to TESS responsibilities, this individual will contribute cyber operations expertise, customer insight, and strategic guidance to related pursuits and emerging opportunities across the ECS CISA account.

• →Engage federal leadership and build trust. Establish and sustain relationships with senior government leaders and mission stakeholders. Lead substantive conversations about operational priorities, capability gaps, dependencies, and desired outcomes.
• →Connect cyber operations capabilities. Help customer leaders understand the relationships among cyber defense functions, teams, services, and technologies. Identify where stronger integration, shared information, or coordinated processes can improve mission effectiveness.
• →Uncover underlying cyber mission problems. Look beyond individual requests to understand root causes, organizational barriers, and cross-functional challenges. Translate customer discussions into clearly defined problems, priorities, and opportunities for improvement.
• →Build alignment and customer commitment. Use trusted relationships, operational experience, and clear communication to bring stakeholders together around recommended approaches. Help customers evaluate tradeoffs, resolve competing priorities, and establish support for next steps.
• →Lead a team of cyber mission operations and solution subject matter experts. Set priorities, provide direction, develop talent, and hold SMEs and team leads accountable for quality and results. Coordinate expertise across disciplines to address customer needs.
• →Guide solution development. Bring customer insights back to TESS program leadership, solutions architects, capability leads, and technical teams. Lead the development of mission-focused recommendations, supported by specialists responsible for detailed architecture and engineering.
• →Translate strategy into program action. Work with TESS leadership and delivery teams to develop concepts of operations, capability roadmaps, requirements, staffing recommendations, and implementation priorities. Keep recommendations grounded in customer needs and program execution realities.
• →Advance operational improvements. Help move approved initiatives into execution by addressing stakeholder concerns, adoption barriers, and dependencies. Establish meaningful measures of progress and mission impact with customer and program leaders.
• →Support CISA account pursuits. Contribute cyber operations expertise to related opportunities, including customer discovery, opportunity assessment, solution shaping, technical narratives, and executive presentations. Coordinate with account, capture, solutions, and delivery leaders to develop credible approaches informed by operational experience.
• →Communicate with executive and technical audiences. Lead briefings, workshops, and strategic discussions that make complex cyber operations issues understandable and support informed decisions.

Salary Range: $275,000- $350,000 

General Description of Benefits 

• →U.S. citizenship, as required by contract.
• →Active Top Secret clearance and ability to obtain DHS Entry on Duty (EOD)/Public Trust approval.
• →At least 15 years related experience
• →Substantial, progressively responsible experience in large scale cybersecurity operations (SecOps, with a practical foundation in leading/running a Security Operations Center (SOC), cyber defense, incident response, threat intelligence, or a comparable operational environment).
• →Demonstrated progression into senior leadership, including experience leading managers, technical leads, or multidisciplinary teams responsible for cyber operations.
• →Experience supporting complex federal cybersecurity missions and engaging directly with senior government leaders.
• →Broad understanding of cyber defense capabilities and their operational relationships, including detection and response, threat intelligence, threat hunting, vulnerability management, detection engineering, security telemetry, and automation.
• →Demonstrated ability to earn executive trust, establish relationships across organizational boundaries, and influence decisions through operational credibility and sound judgment.
• →Experience identifying underlying customer problems, facilitating stakeholder alignment, and building support for actionable recommendations.
• →Ability to assess technical and operational tradeoffs, challenge assumptions, and guide solution discussions in partnership with architects and engineering specialists.
• →Experience translating mission priorities into operational strategies, roadmaps, requirements, resource recommendations, or measurable improvements.
• →Strong executive communication, facilitation, team leadership, and collaboration skills.

Candidates should bring depth in one or more cyber operations disciplines and the breadth to lead across multiple functions. Expertise in every domain, platform, or tool is not expected.