Cybersecurity Operations Manager

- Ensure continuous mission coverage by managing the teams schedule for 24/7/365 operational support, adjusting shifts as necessary to meet staffing needs. - Supervise incident response by leading the team in real-time monitoring of security tools (SIEM, IDS, etc.) for accurate identification, analysis, triage, and reporting of cybersecurity incidents. - Provide technical leadership and mentorship to analysts in the advanced evaluation of network traffic, packet captures, and logs to detect threats and unusual activities. - Integrate threat intelligence by ensuring the team comprehends and applies knowledge of adversary tactics, techniques, and procedures (TTPs), utilizing frameworks like MITRE ATT&CK and the Cyber Kill Chain for incident characterization and prioritization. - Conduct quality assurance by reviewing incident reports, situational awareness reports, and other team outputs to ensure they are precise, well-documented, and actionable for leadership and mission partners. - Manage knowledge effectively through disciplined use of knowledge management tools for incident handling and shift transitions, ensuring data quality and completeness. - Lead the documentation process, including creating, reviewing, and updating operational materials such as Standard Operating Procedures (SOPs), Tactics, Techniques, and Procedures (TTPs), and Quick Reference Guides (QRGs) quarterly. - Identify skill gaps in the team and promote continuous development through training, automation workflow improvements, and professional growth to stay informed on new threats and tools. - Serve as the primary liaison between your team and government leadership, DISA divisions, and external customer agencies. - Provide prompt and clear information to leadership regarding the state of Network Assurance, highlighting emerging trends and impacts of cyber events. - Encourage collaboration within your team and across shifts, ensuring seamless coordination with inspection teams, Cyber Protection Teams (CPTs), and customer incident responders.