Note: The job is a remote job and is open to candidates in USA. Convergenz is seeking a Cyber Operations Lead to support the ARPA-H Federal Cybersecurity Program. The role will oversee day-to-day security operations while remaining hands-on in incident investigation, threat detection, threat hunting, response, remediation, and technical leadership within a SOC environment.
Responsibilities
- Lead and support cybersecurity/SOC operations and provide technical direction to security analysts
- Investigate, analyze, and respond to cybersecurity incidents and security events
- Lead incident containment, remediation, and root-cause analysis efforts
- Perform and support threat hunting, threat detection, and analysis of suspicious activity
- Monitor and analyze SIEM, EDR/XDR, IDS/IPS, endpoint, network, and cloud security telemetry
- Develop and improve detection rules, alerts, security playbooks, and incident response procedures
- Reduce false positives and improve detection and response capabilities
- Analyze IOCs, IOAs, attacker behaviors, and TTPs using frameworks such as MITRE ATT&CK
- Coordinate incident response and security operations activities across technical teams and stakeholders
- Support security reporting, documentation, SOPs, and operational processes
- Provide mentorship and technical guidance to cybersecurity analysts
Skills
- Strong professional experience in cybersecurity operations, SOC operations, incident response, or defensive cyber operations
- Demonstrated experience leading or providing technical direction to cybersecurity/SOC analysts
- Hands-on experience investigating and responding to cybersecurity incidents
- Experience with SIEM technologies, including Splunk
- Experience with EDR/XDR, IDS/IPS, network security, log analysis, and security monitoring
- Experience with threat hunting and/or detection engineering
- Experience monitoring and investigating cloud environments
- Strong understanding of incident handling, containment, eradication, and remediation
- Ability to communicate effectively with both technical teams and program stakeholders
- U.S Citizenship Required
- Federal government cybersecurity experience strongly preferred
- Relevant cybersecurity certifications are highly valued
- Experience supporting cybersecurity operations within a federal government or federal civilian agency environment
- Experience working with federal government stakeholders and/or government contracting programs
- Ability to operate independently within a fast-paced, dynamic environment
- Excellent verbal and written communication skills, with the ability to communicate effectively with both technical and non-technical stakeholders
- GCIH, GCIA, GCED, or comparable cybersecurity certification
Benefits
- Remote work arrangement
- 12-month contract to start with 5 option years
Company Overview