Security Operations Manager

Bachelor's degree and at least eight (8) years of relevant professional experience.

CISSP, GCIA, or equivalent cybersecurity certification.

Demonstrated experience leading or managing cybersecurity operations, security monitoring, incident response, or Security Operations Center (SOC) activities.

supporting enterprise security operations in highly available, mission-critical environments.

Strong knowledge of cybersecurity operations, including vulnerability management, incident response, SIEM, security monitoring, threat analysis, log analysis, digital forensics, configuration management, and security hardening.

Working knowledge of NIST SP 800-53 security controls and Federal cybersecurity requirements.

coordinating cybersecurity activities with ISSOs, security managers, system administrators, engineers, application teams, and other technical stakeholders.

Demonstrated ability to manage security incidents, establish priorities, coordinate technical resources, and drive issues through resolution in time-sensitive operational environments.

developing and maintaining security operations procedures, technical documentation, SOPs, runbooks, configuration guides, and operational metrics.

Strong written and verbal communication skills with the ability to communicate technical security issues, risks, operational status, and recommended actions to technical and management audiences.

Ability to provide leadership across teams supporting continuous, 24/7, and after-hours operations.

Experience supporting Department of State or other Federal Government cybersecurity environments.

with Oracle Database, Oracle Engineered Systems, Oracle Audit Vault/Data Safe (AVDF), Oracle Privileged User Management (PUM), and/or Oracle Golden Gate.

with Oracle Identity Manager (OIM), Oracle Access Manager (OAM), Oracle HTTP Server (OHS), or Oracle Unified Directory (OUD).

implementing and operating SIEM capabilities for Oracle or other enterprise database environments.

applying DISA Security Technical Implementation Guides (STIGs), Federal security baselines, and enterprise configuration-management requirements.

supporting RMF, A&A, POA&M remediation, continuous monitoring, and Security Impact Analysis activities from a technical security operations perspective.

supporting privileged-access management, multifactor authentication, insider-threat monitoring, threat intelligence, and forensic analysis.

leading cybersecurity operations supporting geographically distributed, mission-critical Federal systems. Security Requirements Must be able to obtain and maintain the security clearance and/or Department of State personnel security eligibility required for the position. Work Location and Schedule The position may primarily be performed remotely; however, because the Security Operations Manager is designated as Key Personnel, the individual must reside within reasonable commuting distance of the Government facility at State Annex 17 (SA-17), 600 19th Street NW, Washington, D.C., and be available for onsite meetings or mission-critical support as required. Contractor personnel are expected to be available during established core business hours; however, this position is responsible for managing operations that include 24/7 and after-hours coverage and must be available as necessary to respond to critical operational and cybersecurity events.