Cyber Operations Solutions Architect - Tier 3 Lead
Maveris, United States
Job Description
Maveris is an IT and cybersecurity services company committed to helping organizations create secure digital solutions to accelerate their mission. We are Veteran-owned and proud to serve customers across the Federal Government and private sector. We have an opening for a full-time, permanent Cyber Operations Solutions Architect to join our talented, dynamic team in support of a large Federal Government customer.
As a Cyber Operations Solutions Architect and Tier 3 Lead, you will be at the forefront of the Department of Veterans Affairs (VA) cybersecurity efforts, providing strategic guidance and technical expertise to lead the Tier 3 Cybersecurity Analysts and mission. You will play a pivotal role in designing and implementing advanced cybersecurity solutions, optimizing incident response capabilities, and ensuring the overall security posture of the organization.
Veterans are encouraged to apply.
This role is 80% remote, but will have some onsite requirements in Martinsburg, WV or Hines, IL.
- Lead and manage the Tier 3 Cybersecurity Analyst team, providing technical guidance, mentorship, and support in handling complex cyber incidents. Foster a collaborative and growth-oriented environment that promotes knowledge sharing and continuous improvement.
- Design and architect innovative cybersecurity solutions to enhance the organization's ability to detect, respond to, and mitigate advanced cyber threats. Identify gaps in the existing security infrastructure and work closely with engineering teams to implement robust solutions.
- Develop and maintain a comprehensive incident response strategy that aligns with industry best practices and regulatory requirements. Ensure that Tier 3 analysts are well-prepared to effectively respond to and manage high-impact security incidents.
- Lead and actively participate in the investigation, analysis, and resolution of Tier 3 and escalated cybersecurity incidents. Analyze attack patterns, determine the root cause, and recommend appropriate remediation measures to prevent future occurrences.
- Serve as a subject matter expert in handling incidents of varying complexity, providing guidance and support to analysts during investigations.
- Ensure accurate and detailed documentation of incident response activities, including analysis, actions taken, and lessons learned. Collaborate with knowledge management teams to maintain up-to-date incident response playbooks.
- Collaborate effectively with cross-functional teams, including forensics, threat intelligence, IT, and network administrators. Clearly communicate technical information and incident-related updates to management and stakeholders.
- Develop and operationalize advanced security analytics use cases to detect and respond to sophisticated cyber threats in real-time.
- Monitor the performance of security analytics and automation processes regularly, identifying areas for improvement and taking proactive measures to enhance their efficacy.
- Leverage Security Orchestration, Automation, and Response (SOAR) platforms to streamline and automate incident response processes, including enrichment, containment, and remediation actions.
- Stay informed about the latest cybersecurity threats, trends, and best practices. Actively participate in cybersecurity exercises, drills, and simulations to improve incident response capabilities.
Requirements
- Bachelor's degree in computer science, cybersecurity, information technology, or a related field (or equivalent work experience)
- 7+ years of experience supporting large-scale IT related projects
- 5+ years of experience supporting incident response in an enterprise-level Security Operations Center (SOC) and proven experience leading and mentoring cybersecurity teams in a dynamic and fast-paced environment
- A deep understanding of cybersecurity principles, incident response methodologies, and a proactive mindset to ensure our SOC operates effectively in a high-pressure environment
- Industry certifications, such as CISSP, GCIH, GCFA, CEH, or equivalent, are highly desirable
- Strong technical expertise in cybersecurity technologies, such as SIEM, IDS/IPS, EDR, SOAR platforms, and network security solutions
- Experience with enterprise ticketing systems like ServiceNow
- Excellent analytical and problem-solving skill
- Ability to work independently and in a team environment to identify errors, pinpoint root causes, and devise solutions with minimal oversight
- Effective communication and interpersonal skills, with the ability to convey complex technical concepts to both technical and non-technical stakeholders
Benefits
Maveris attracts and retains talent of the highest caliber by offering opportunities to work in exciting and challenging environmen