Security Fusion Center (SFC) Manager-Public Trust Required

The Security Fusion Center (SFC) Manager is responsible for leading the strategy, governance, and operational maturity of an enterprise Security Fusion Center. This role serves as the primary architect and coordinator for an intelligence-driven cybersecurity program that integrates threat intelligence, threat hunting, incident response, security engineering, insider threat, continuous monitoring, and attack surface management into a unified operational capability.

The ideal candidate possesses extensive experience developing and managing enterprise cybersecurity programs, establishing governance frameworks, and driving cross-functional collaboration among cybersecurity operations, engineering, and executive leadership. This individual will lead the development of Security Fusion Center strategy, operational processes, performance metrics, and implementation roadmaps while continuously improving the organization's ability to identify, detect, respond to, and mitigate cyber threats.

• Lead the strategic planning, governance, and operational management of the enterprise Security Fusion Center (SFC).
• Develop and maintain the SFC mission, vision, operational scope, and long-term strategic roadmap.
• Continuously assess and mature the Security Fusion Center's people, processes, technology, and operational capabilities.
• Develop and maintain implementation plans aligned with evolving organizational priorities and the cyber threat landscape.
• Establish governance structures supporting enterprise-wide cybersecurity collaboration and decision-making.

• Develop, maintain, and update SFC governance documentation, including:
• Program Charter
• Concept of Operations (CONOPS)
• Standard Operating Procedures (SOPs)
• Operational Playbooks
• Process Documentation
• Ensure governance documentation remains current and aligned with organizational objectives and industry best practices.
• Develop implementation strategies supporting adoption of Security Fusion Center capabilities across the enterprise.

Coordinate and support enterprise cybersecurity functions including:

• Threat Intelligence
• Advanced Threat Hunting
• Incident Response
• Continuous Monitoring
• Alerting and Detection
• Security Solutions Engineering
• Insider Threat Program
• Attack Surface Management
• Assessment and Authorization
• Foster collaboration among technical teams to improve operational effectiveness and cyber resilience.
• Identify opportunities to improve information sharing, operational workflows, and threat correlation across cybersecurity disciplines.

• Assess organizational cybersecurity capabilities and identify gaps in people, processes, technology, and operational maturity.
• Develop strategic recommendations for new cybersecurity tools, technologies, staffing, and operational enhancements.
• Evaluate emerging threats and evolving cybersecurity trends to support proactive defense strategies.
• Develop future-state operating models supporting enterprise cyber defense objectives.
• Develop executive dashboards and reporting mechanisms that communicate program performance and operational maturity.
• Analyze trends to recommend improvements in cyber operations and organizational readiness.

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Assurance, or a related field.
• 6+ years of experience in cybersecurity operations, cyber defense, or enterprise security program management.
• Demonstrated experience developing or managing a Security Operations Center (SOC), Security Fusion Center (SFC), Cyber Fusion Center, or equivalent enterprise cybersecurity program.
• Experience leading cross-functional cybersecurity initiatives involving multiple operational teams.
• Strong understanding of:
• Threat Intelligence
• Advanced Threat Hunting
• Incident Response
• Continuous Monitoring
• Security Engineering
• Insider Threat Programs
• Attack Surface Management
• Experience developing governance documentation, operational procedures, playbooks, and Concepts of Operations (CONOPS).
• Experience developing cybersecurity strategies, roadmaps, implementation plans, and executive-level reporting.
• Strong knowledge of cybersecurity frameworks including the NIST Cybersecurity Framework (CSF), NIST Risk Management Framework (RMF), and MITRE ATT&CK.
• Excellent communication, leadership, and stakeholder engagement skills.

• CISSP (Certified Information Systems Security Professional)
• GIAC Certified Incident Handler (GCIH)
• GIAC Cyber Threat Intelligence (GCTI)
• Certified Information Security Manager (CISM)
• Project Management Professional (PMP)
• Experience supporting federal government cybersecurity programs.
• Experience implementing enterprise SIEM, SOAR, XDR, EDR, threat intelligence platforms, or security analytics solutions.
• Familiarity with Zero Trust Architecture and enterprise cyber modernization initiatives.

• Ability to lead large-scale cybersecurity transformation initiatives.
• Strong understanding of intelligence-driven cybersecurity operations and Security Fusion Center concepts.
• Ability to translate technical cybersecurity capabilities into strategic business value.
• Expertise in cybersecurity program governance, operational planning, and organizational change management.
• Ability to facilitate collaboration across engineering, operations, intelligence, risk management, and executive leadership teams.
• Strong analytical and problem-solving skills with the ability to assess organizational cyber maturity and recommend strategic improvements.
• Excellent written and verbal communication skills, including development of executive briefings, strategic plans, and governance documentation.