ECS

Lead security operations strategy, teams, incident response, detection engineering, service quality, and customer engagement across enterprise and customer environments. | Requires 15+ years in cybersecurity, 5+ years leading teams, deep SOC and incident response expertise, and strong detection engineering, customer communication, and operational leadership. | We are seeking a Director of Security Operations to lead the people, processes, and operational disciplines that support our managed cybersecurity services. This leader will be accountable for effective security monitoring, threat detection, investigation, incident response, and continuous improvement across customer and enterprise environments. This is a senior operational leadership role that combines security operations strategy, people leadership, customer engagement, and hands-on oversight. The Director will lead SOC analysts and detection engineers and partner closely with Security Engineering, the Project Management Office, customer teams, and enterprise stakeholders to deliver consistent, high-quality security outcomes. Responsibilities • Lead, develop, and mentor a high-performing team of SOC analysts, detection engineers, red team operators, cyber threat intelligence anlaysts, and exposure management analysts. • Define the security operations strategy, operating standards, service model, and capability roadmap. • Oversee day-to-day monitoring, alert triage, investigation, escalation, and response activities across customer and enterprise environments. • Serve as the senior operational leader during major security incidents, coordinating investigation, containment, recovery, and executive and customer communications. • Lead the detection engineering program, including detection development, validation, tuning, coverage assessment, and lifecycle management. • Integrate cyber threat intelligence and threat hunting into SOC operations to improve detection, investigative context, and proactive defense. • Establish clear standards for alert analysis, case documentation, escalation quality, quality assurance, and operational reporting. • Identify and implement practical applications of AI across security operations to accelerate triage and investigation, improve analytical quality, automate repeatable workflows, and enhance service scalability while maintaining appropriate human oversight. • Develop and maintain operating procedures, investigation playbooks, escalation criteria, and incident response processes. • Work directly with customers and enterprise stakeholders to understand priorities, communicate risk, explain operational decisions, and resolve service concerns. • Partner with Security Engineering and IT teams to ensure security platforms, telemetry, integrations, and automation reliably support SOC requirements. • Manage operational priorities, staffing, hiring, performance, professional development, on-call coverage, and service delivery risk. • Support solution development, operational proposals, service transitions, and strategic customer engagements. Salary Range: $180,000-$250,000 General Description of Benefit • 15+ years of experience in cybersecurity, security operations, incident response, detection engineering, threat intelligence, or a related discipline. • 5+ years of experience leading cybersecurity or security operations teams. Preference will be given to applicants who have led large SOC, MDR, or multi-customer security operations teams at the Director level or above. • Deep understanding of SOC operations, including monitoring, alert triage, investigation, escalation, incident response, threat hunting, and continuous improvement. • Demonstrated experience leading complex security incidents and coordinating technical, business, customer, and executive stakeholders through response and recovery. • Strong knowledge of detection engineering practices, including use-case development, detection validation, tuning, coverage analysis, and MITRE ATT&CK mapping. • Experience integrating cyber threat intelligence and adversary tradecraft into detection, hunting, investigation, and response activities. • Strong operational understanding of SIEM, EDR/XDR, identity, network, cloud, email, and other security telemetry used for detection and investigation. • Experience establishing SOC operating procedures, playbooks, escalation criteria, quality standards, and governance practices. • Experience defining and using security operations metrics to manage workload, service quality, detection effectiveness, response performance, and operational risk. • Proven ability to build, mentor, and lead high-performing security operations teams in demanding environments. • Strong ability to translate business, threat, and risk priorities into security operations priorities and execution plans. • Strong communication and customer-facing skills, with the ability to explain incidents, operational performance, and technical risk to analysts, technical leaders, executives, and customers. • Sound operational judgment, including the ability to make timely decisions under pressure, manage competing priorities, and balance risk, evidence, customer impact, and service commitments.

Manage IT projects lifecycle and coordinate cross-functional teams for federal data analytics platform. | Requires 7+ years managing IT projects, federal experience, and strong leadership and communication skills. | Job Description Everforth ECS is seeking an Sr. IT Project Manager to work remotely. Everforth ECS is seeking an experienced IT Project Manager to support a rapidly growing Data Analytics and Business Intelligence platform focused on providing data solutions that empower our federal customers. In this role, you will be guiding a cross-functional team (composed of data scientists, data engineers, developers, and functional staff) to support our Department of Homeland Security (DHS) Office of the Chief Information Officer (OCIO) customer. The project being supported is extremely high priority and has a lot of visibility from senior Federal leadership. The ideal candidate for this role will be a critical thinker and an excellent communicator and will be self-motivated, action-driven, extremely detail-oriented, capable of juggling multiple high priority responsibilities, and passionate about collaborating with various stakeholders on varied topics. Job Responsibilities Include • Managing the end-to-end lifecycle of IT projects from planning/ideation through to deployment/implementation. • Facilitating weekly working group meetings with senior Federal staff to align project progress across various stakeholders. • Developing and managing strong relationships with federal stakeholders to ensure continued progress on identified initiatives. • Resolving blockers and aligning cross-functional teams around project goals and technical requirements. • Maintaining a project roadmap. • Identifying, developing, and managing project schedules, resources, risks, priorities, and activities • Preparing and delivering project status updates and reviews to federal stakeholders and to support monthly contract deliverables. • Maintain budget forecasting, ROM estimates, and cost-tracking documentation to support planning, resource allocation, and leadership decision-making. • Overseeing and mentoring junior project team members as needed. Salary Range: $150,000 - $160,000 Benefits General Description of Benefits Required Skills • Must be a US Citizen. • Must be able to obtain a Public Trust. • A Bachelors degree in a relevant field. • 7+ years of related experience managing IT/technology projects. • Experience managing technical and strategy teams in data science, data analytics, and data management. • Proficiency in various project management methodologies (Agile, Scrum, Waterfall, etc.). • Excellent verbal and written communication skills. • Excellent leadership, team management, and presentation skills. • Understanding of the SDLC. • Experience supporting federal agencies (DHS preferred). Desired Skills • Prior professional services or federal consulting experience; experience supporting DHS preferred. • Experience leading IT modernization projects. • Project Management Professional (PMP) certification or other industry-related certification. • Experience with the Atlassian Suite (Jira/Confluence). • Experience supporting data governance projects and tools such as Collibra and OpenMetaData. • Experience leading Agile development teams. • Experience using SharePoint. • Familiarity with financial analysis or budget tracking. • Familiarity with MS Azure/AWS. • Experience building highly scalable platforms, products, or services. #EverforthECS1 ECS Federal LLC is an equal opportunity employer and does not discriminate or allow discrimination on the basis any characteristic protected by law. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, or local jurisdiction law. Everforth ECS is the federal segment of Everforth, a $4B global organization with over 10,000 employees. Our nearly 3,500 professionals deliver advanced technology solutions in data and AI, cybersecurity, and enterprise transformation, serving defense, intelligence, and federal civilian agencies. Our work powers mission-critical outcomes, strengthens technology partnerships, and creates meaningful opportunities for our people. We are defined by a commitment to excellence in delivery, a culture of innovation, and an environment where talent can thrive and grow. We Value • Attracting and developing top talent and high-performing teams • Fostering a culture that is engaging, accountable, and mission-driven Meet the challenge. Make a difference with Everforth ECS!

Manage end-to-end IT project lifecycles and lead cross-functional teams to deliver data analytics solutions for federal clients. | 7+ years managing IT projects, experience with federal agencies, strong leadership and communication skills, and proficiency in project management methodologies. | Job Description Everforth ECS is seeking an Sr. IT Project Manager to work remotely. Everforth ECS is seeking an experienced IT Project Manager to support a rapidly growing Data Analytics and Business Intelligence platform focused on providing data solutions that empower our federal customers. In this role, you will be guiding a cross-functional team (composed of data scientists, data engineers, developers, and functional staff) to support our Department of Homeland Security (DHS) Office of the Chief Information Officer (OCIO) customer. The project being supported is extremely high priority and has a lot of visibility from senior Federal leadership. The ideal candidate for this role will be a critical thinker and an excellent communicator and will be self-motivated, action-driven, extremely detail-oriented, capable of juggling multiple high priority responsibilities, and passionate about collaborating with various stakeholders on varied topics. Job Responsibilities Include • Managing the end-to-end lifecycle of IT projects from planning/ideation through to deployment/implementation. • Facilitating weekly working group meetings with senior Federal staff to align project progress across various stakeholders. • Developing and managing strong relationships with federal stakeholders to ensure continued progress on identified initiatives. • Resolving blockers and aligning cross-functional teams around project goals and technical requirements. • Maintaining a project roadmap. • Identifying, developing, and managing project schedules, resources, risks, priorities, and activities • Preparing and delivering project status updates and reviews to federal stakeholders and to support monthly contract deliverables. • Maintain budget forecasting, ROM estimates, and cost-tracking documentation to support planning, resource allocation, and leadership decision-making. • Overseeing and mentoring junior project team members as needed. Salary Range: $150,000 - $160,000 Benefits General Description of Benefits Required Skills • Must be a US Citizen. • Must be able to obtain a Public Trust. • A Bachelors degree in a relevant field. • 7+ years of related experience managing IT/technology projects. • Experience managing technical and strategy teams in data science, data analytics, and data management. • Proficiency in various project management methodologies (Agile, Scrum, Waterfall, etc.). • Excellent verbal and written communication skills. • Excellent leadership, team management, and presentation skills. • Understanding of the SDLC. • Experience supporting federal agencies (DHS preferred). Desired Skills • Prior professional services or federal consulting experience; experience supporting DHS preferred. • Experience leading IT modernization projects. • Project Management Professional (PMP) certification or other industry-related certification. • Experience with the Atlassian Suite (Jira/Confluence). • Experience supporting data governance projects and tools such as Collibra and OpenMetaData. • Experience leading Agile development teams. • Experience using SharePoint. • Familiarity with financial analysis or budget tracking. • Familiarity with MS Azure/AWS. • Experience building highly scalable platforms, products, or services. #EverforthECS1 ECS Federal LLC is an equal opportunity employer and does not discriminate or allow discrimination on the basis any characteristic protected by law. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, or local jurisdiction law. Everforth ECS is the federal segment of Everforth, a $4B global organization with over 10,000 employees. Our nearly 3,500 professionals deliver advanced technology solutions in data and AI, cybersecurity, and enterprise transformation, serving defense, intelligence, and federal civilian agencies. Our work powers mission-critical outcomes, strengthens technology partnerships, and creates meaningful opportunities for our people. We are defined by a commitment to excellence in delivery, a culture of innovation, and an environment where talent can thrive and grow. We Value • Attracting and developing top talent and high-performing teams • Fostering a culture that is engaging, accountable, and mission-driven Meet the challenge. Make a difference with Everforth ECS!

Support vulnerability and exposure management operations across multiple client environments within an MSP SOC. | 3-5 years cybersecurity experience in vulnerability management, strong communication skills, familiarity with security frameworks, and ability to coordinate remediation. | The Vulnerability Management Analyst is responsible for supporting vulnerability and exposure management operations across multiple client environments within an MSP SOC. This role focuses on vulnerability assessment, risk analysis, remediation coordination, client reporting, and operational support across diverse enterprise security monitoring technologies and vulnerability management platforms. This role works closely with the Exposure Management Team, Security Engineering Team, SOC analysts, client technical teams, and internal engineering teams to deliver high-quality vulnerability management services, actionable risk intelligence, and effective remediation support across a multi-client portfolio. This role requires the ability to seamlessly transition between client environments, adapt to varied technology stacks, and communicate complex security risks to both technical and executive audiences. Salary Range: $100,000 - $115,000 General Description of Benefits • Experience: Minimum of 3-5 years of cybersecurity experience supporting vulnerability management or exposure management operations, preferably within an MSP, MSSP, or multi-client SOC environment. • Multi-Client Operations: Proven ability to manage security operations across multiple client environments simultaneously, with strong organizational and context-switching capabilities. • Vulnerability Management Platforms: Hands-on experience with multiple vulnerability management technologies such as Tenable (Nessus, Tenable.io, Tenable.sc), Crowdstrike Spotlight, or similar platforms. • Risk Assessment Expertise: Strong analytical skills in vulnerability risk assessment, prioritization methodologies, CVSS scoring, exploitability analysis, and business impact evaluation. • Client Communication Skills: Excellent verbal and written communication skills with demonstrated ability to explain technical security risks to diverse audiences including executives, IT teams, and non-technical stakeholders. • Asset and Environment Knowledge: Strong understanding of enterprise infrastructure, cloud environments (AWS, Azure, GCP), container technologies, endpoint systems, and network architecture across varied enterprise configurations. • Remediation Coordination: Experience coordinating vulnerability remediation efforts with IT teams, tracking remediation progress, and managing client expectations around timelines and priorities. • Security Framework Knowledge: Familiarity with cybersecurity frameworks such as NIST Cybersecurity Framework, CIS Critical Security Controls, ISO 27001, and industry-specific compliance requirements. • Able and willing to obtain a US Security Clearance. • On-Call Support: Participates in on-call support to assist with security incident response, operational issues, and investigation activities to maintain continuous SOC coverage and response capabilities.

Support vulnerability and exposure management operations across multiple client environments, including assessment, risk analysis, remediation coordination, and client reporting. | 3-5 years cybersecurity experience in vulnerability management within MSP/MSSP SOC, strong communication skills, familiarity with security frameworks, and willingness to obtain US Security Clearance. | The Vulnerability Management Analyst is responsible for supporting vulnerability and exposure management operations across multiple client environments within an MSP SOC. This role focuses on vulnerability assessment, risk analysis, remediation coordination, client reporting, and operational support across diverse enterprise security monitoring technologies and vulnerability management platforms. This role works closely with the Exposure Management Team, Security Engineering Team, SOC analysts, client technical teams, and internal engineering teams to deliver high-quality vulnerability management services, actionable risk intelligence, and effective remediation support across a multi-client portfolio. This role requires the ability to seamlessly transition between client environments, adapt to varied technology stacks, and communicate complex security risks to both technical and executive audiences. Salary Range: $100,000 - $115,000 General Description of Benefits • Experience: Minimum of 3-5 years of cybersecurity experience supporting vulnerability management or exposure management operations, preferably within an MSP, MSSP, or multi-client SOC environment. • Multi-Client Operations: Proven ability to manage security operations across multiple client environments simultaneously, with strong organizational and context-switching capabilities. • Vulnerability Management Platforms: Hands-on experience with multiple vulnerability management technologies such as Tenable (Nessus, Tenable.io, Tenable.sc), Crowdstrike Spotlight, or similar platforms. • Risk Assessment Expertise: Strong analytical skills in vulnerability risk assessment, prioritization methodologies, CVSS scoring, exploitability analysis, and business impact evaluation. • Client Communication Skills: Excellent verbal and written communication skills with demonstrated ability to explain technical security risks to diverse audiences including executives, IT teams, and non-technical stakeholders. • Asset and Environment Knowledge: Strong understanding of enterprise infrastructure, cloud environments (AWS, Azure, GCP), container technologies, endpoint systems, and network architecture across varied enterprise configurations. • Remediation Coordination: Experience coordinating vulnerability remediation efforts with IT teams, tracking remediation progress, and managing client expectations around timelines and priorities. • Security Framework Knowledge: Familiarity with cybersecurity frameworks such as NIST Cybersecurity Framework, CIS Critical Security Controls, ISO 27001, and industry-specific compliance requirements. • Able and willing to obtain a US Security Clearance. • On-Call Support: Participates in on-call support to assist with security incident response, operational issues, and investigation activities to maintain continuous SOC coverage and response capabilities.

Support vulnerability and exposure management operations across multiple client environments within an MSP SOC. | 3-5 years cybersecurity experience in vulnerability management, strong communication skills, familiarity with security frameworks, and willingness to obtain US Security Clearance. | The Vulnerability Management Analyst is responsible for supporting vulnerability and exposure management operations across multiple client environments within an MSP SOC. This role focuses on vulnerability assessment, risk analysis, remediation coordination, client reporting, and operational support across diverse enterprise security monitoring technologies and vulnerability management platforms. This role works closely with the Exposure Management Team, Security Engineering Team, SOC analysts, client technical teams, and internal engineering teams to deliver high-quality vulnerability management services, actionable risk intelligence, and effective remediation support across a multi-client portfolio. This role requires the ability to seamlessly transition between client environments, adapt to varied technology stacks, and communicate complex security risks to both technical and executive audiences. Salary Range: $100,000 - $115,000 General Description of Benefits • Experience: Minimum of 3-5 years of cybersecurity experience supporting vulnerability management or exposure management operations, preferably within an MSP, MSSP, or multi-client SOC environment. • Multi-Client Operations: Proven ability to manage security operations across multiple client environments simultaneously, with strong organizational and context-switching capabilities. • Vulnerability Management Platforms: Hands-on experience with multiple vulnerability management technologies such as Tenable (Nessus, Tenable.io, Tenable.sc), Crowdstrike Spotlight, or similar platforms. • Risk Assessment Expertise: Strong analytical skills in vulnerability risk assessment, prioritization methodologies, CVSS scoring, exploitability analysis, and business impact evaluation. • Client Communication Skills: Excellent verbal and written communication skills with demonstrated ability to explain technical security risks to diverse audiences including executives, IT teams, and non-technical stakeholders. • Asset and Environment Knowledge: Strong understanding of enterprise infrastructure, cloud environments (AWS, Azure, GCP), container technologies, endpoint systems, and network architecture across varied enterprise configurations. • Remediation Coordination: Experience coordinating vulnerability remediation efforts with IT teams, tracking remediation progress, and managing client expectations around timelines and priorities. • Security Framework Knowledge: Familiarity with cybersecurity frameworks such as NIST Cybersecurity Framework, CIS Critical Security Controls, ISO 27001, and industry-specific compliance requirements. • Able and willing to obtain a US Security Clearance. • On-Call Support: Participates in on-call support to assist with security incident response, operational issues, and investigation activities to maintain continuous SOC coverage and response capabilities.