Cyber Mission & Solutions Lead – Federal Civilian & Health

Everforth ECS is seeking an Cyber Mission & Solutions Lead – Federal Civilian & Healthto work in our Arlington, VAoffice.

The Federal Cyber Solution Leader will lead the strategy, development, and advancement of our cybersecurity capabilities across the Federal Civilian and Health market. This is an executive-level solution leadership role for someone who understands how federal agencies are evolving their cyber missions and can translate federal cybersecurity strategy, policy, technology investments, and security data into practical operational capabilities that measurably reduce risk and deliver mission outcomes.

You will break down program silos and champion broader operationalization of ECS-developed solutions, platforms, and accelerators across federal enterprises. A particular focus will be helping Everforth ECS and our customer define the next generation of Continuous Diagnostics and Mitigation (CDM) operationalization: expanding beyond visibility and analytics and into an integrated Cyber Defense Management Platform that, detects threats, automates responses, and accelerates operational decisions using enterprise security data.

• Partner with the Federal Civilian and Health Business Unit Leader and Account Portfolio Leaders to drive the growth, revenue, margin, and overall financial performance of the cyber market.
• Bring both technical and business judgment to decisions about where Everforth ECS should compete, where capabilities can create differentiated value, and where company investment can produce sustainable growth.
• Develop business cases and portfolio recommendations for company-funded Cyber R&D, IRAD, reusable solutions, accelerators, and strategic technology investments. Establish clear expectations for customer adoption, opportunity alignment, scalability, and measurable return on investment.

• Enterprise Cyber Strategy & Alignment: Define and champion the federal cyber vision for the Federal Civilian and Health BU, ensuring seamless alignment and synergy with Everforth ECS's broader corporate cybersecurity strategy, center-of-excellence capabilities, and cross-BU initiatives.
• SOC Modernization & Cyber Operations Leadership: Build upon ECS’s multi-agency SOC services footprint to design and scale the next generation of modern federal SOCs—infusing advanced detection engineering, threat hunting, SOAR/automation, and cyber threat intelligence (CTI).
• Capability Operationalization & Scaling: Replicate and expand ECS’s proven track record of capability operationalization (exemplified by our work in CDM and cyber data integration) to scale ECS-developed tools, analytics platforms, and reusable frameworks across customer environments.
• Solution Architecture & Capture: Partner closely with Growth, Capture, and Delivery leaders to shape and architect winning technical solutions for high-visibility, large-scale federal cyber opportunities and proposals.
• Industry & Customer Executive Engagement: Serve as a premier technical authority and external voice for Everforth ECS across the federal civilian market, fostering strategic relationships with agency CISOs, security directors, CISA leadership, and strategic OEM/technology partners.
• Investment & R&D Direction: Guide portfolio recommendations for company-funded Cyber R&D, Internal Research & Development (IRAD), reusable solutions, reference architectures, and targeted demonstrations aligned with agency mission requirements and emerging mandates (e.g., Zero Trust, CIRCIA, OMB/CISA directives).

Salary Range: $200,000-$300,000

General Description of Benefits

• 12+ years of experience in cybersecurity, including significant experience supporting Federal Civilian, Health, or broader federal customers
• Demonstrated leadership experience in federal cybersecurity operations, SOC modernization, or enterprise cyber programs
• Strong understanding of CISA CDM and how CDM capabilities and data are operationalized within federal agencies
• Broad technical fluency across security operations, including SIEM/security data, vulnerability and exposure management, asset visibility, threat detection, incident response, Zero Trust, cloud security, and automation
• Experience translating cybersecurity technology and data into operational outcomes, measurable risk reduction, and mission value
• Experience engaging federal CISOs, cybersecurity executives, and senior technical stakeholders
• Demonstrated experience supporting business development, capture, solution development, or strategic federal pursuits
• Proven ability to lead through influence across matrixed technical, delivery, growth, and business organizations
• Strong executive communication skills and ability to translate complex technical concepts into clear customer and business value
• Bachelor’s degree in cybersecurity, computer science, engineering, information systems, or a related field, or equivalent relevant experience

• Direct experience supporting CISA CDM, including agency-level or federal enterprise implementation and operationalization
• Experience designing or modernizing federal SOCs and enterprise security operations
• Deep experience with SIEM, security data platforms, detection engineering, security analytics, SOAR/automation, or AI-enabled security operations
• Experience integrating CDM, vulnerability, asset, identity, endpoint, cloud, and threat data into risk-informed operational workflows
• Experience developing and taking to market repeatable cybersecurity offerings, reference architectures, accelerators, or managed capabilities
• Experience working with major cybersecurity technology partners and OEMs
• Knowledge of federal cybersecurity policy and initiatives, including Zero Trust, FISMA, NIST frameworks, CISA directives, and government-wide cybersecurity modernization
• Experience shaping or winning large, complex federal cybersecurity programs
• Advanced degree and/or relevant certifications such as CISSP, CISM, CCSP, or similar

#EverforthECS1

ECS Federal LLC is an equal opportunity employer and does not discriminate or allow discrimination on the basis any characteristic protected by law. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, or local jurisdiction law.

Everforth ECS is the federal segment of Everforth, a $4B global organization with over 10,000 employees. Our nearly 3,500 professionals deliver advanced technology solutions in data and AI, cybersecurity, and enterprise transformation, serving defense, intelligence, and federal civilian agencies.

Our work powers mission-critical outcomes, strengthens technology partnerships, and creates meaningful opportunities for our people. We are defined by a commitment to excellence in delivery, a culture of innovation, and an environment where talent can thrive and grow.

We value:

• Attracting and developing top talent and high-performing teams

• Fostering a culture that is engaging, accountable, and mission-driven

• Support the Federal Civilian and Health cyber growth strategy and associated bookings objectives across recompetes, on-contract growth, new work, and capability-driven expansion.
• Work proactively with customers and Account, Growth, BD, Capture, and Solutions leaders to identify emerging mission requirements and translate them into actionable account strategies, campaigns, and opportunities.
• Lead cyber solution positioning for strategic pursuits and help convert the Everforth ECS Federal Cyber vision into qualified pipeline and bookings.
• Routinely participate in and shape major federal cyber proposals as a senior technical and business voice, including solution strategy, differentiation, technical approach, partner strategy, executive reviews, oral presentations, and customer engagement.

• Define Everforth ECS's vision for modern Federal Security Operations across the Civilian & Health market.
• Lead the next generation of CDM operationalization moving beyond visibility toward an integrated Cyber Defense Management Platform: attack-surface understanding, risk prioritization, threat detection, automated response, and data-driven operational decisions.
• Shape strategy across SOC modernization, SIEM & security data platforms, Identity & Zero Trust, threat intel / detection engineering / threat hunting, AI-enabled cyber operations, and cyber risk analytics & executive decision support.

• Build, lead, develop, and inspire the cyber mission and technical community supporting the Federal Civilian and Health market, working closely with Account Portfolio Leaders and Program Managers responsible for direct program execution and personnel management.
• Mentor and develop program leaders, solution architects, cyber SMEs, engineers, and emerging technical leaders. Build succession and leadership pipelines that strengthen the long-term capability of the business.
• Create communities of practice that connect cyber expertise across programs and ensure that innovation, lessons learned, intellectual property, and technical expertise are shared across organizational boundaries.

• Serve as a senior external voice of Everforth ECS's Federal Cyber business.
• Build trusted executive relationships with Federal Civilian and Health CISOs, CIOs, security operations executives, CISA leadership, government-wide cyber organizations, and other mission and technology leaders.
• Build strategic relationships with technology partners and OEMs and determine where partnerships, commercial technologies, ECS intellectual property, and ECS engineering expertise can combine to create differentiated solutions.

This role will define how federal agencies integrate and operationalize modern cyber defense capabilities, specifically leading the deployment and operational integration of ECS-developed capabilities, proprietary accelerators, and IP across the following domains:

• Enterprise SOC Modernization & Operations-as-a-Service: Integrating ECS-developed SecOps playbooks, automated triage frameworks, and shared-services architectures to advance agency SOCs from reactive monitoring to proactive, intelligence-led cyber defense.
• Security Data Platforms & Next-Gen SIEM: Deploying ECS-engineered data pipelines, ingestion connectors, and security data mesh architectures (across Elastic, Splunk, Databricks, Cribl, etc.) to unify high-volume telemetry into actionable analytics.
• Capability Operationalization & Risk-Informed Workflows: Translating disparate data into proactive operational defense by embedding ECS-developed operationalization frameworks - building on our proven data integration and exposure management tools to drive automated ticketing, remediation, and mitigation workflows.
• Zero Trust Architecture (ZTA) & Identity Governance: Incorporating ECS Zero Trust transition roadmaps, policy engines, and ICAM integration models to enforce dynamic access controls and continuous endpoint posture validation.
• Cyber Threat Intelligence (CTI) & Automated Detection Engineering: Embedding ECS threat-hunting content libraries, detection-as-code pipelines, and CTI sharing integrations (aligned with CISA directives, CIRCIA, and MITRE ATT&CK) directly into agency defenses.
• Applied AI & Machine Learning for Cyber Operations: Scaling ECS-developed AI/ML models, agentic workflows, and predictive analytics to automate tier-1/tier-2 alert triaging, minimize analyst cognitive fatigue, and accelerate mean-time-to-respond (MTTR).
• Executive Decision Support & Cyber Risk Quantification: Implementing ECS-engineered risk quantification models, continuous compliance reporting, and C-suite operational dashboards to translate technical risk into executive mission impacts.