Cybersecurity Lead Incident Response Coordinator

 Nationwide IT Services (NIS)
 On-Site (5 Days/Week) – Executive Office for Immigration Review (EOIR), Office of Information Technology, 4825 Mark Center Drive, Suite 200, Alexandria, VA 22311
 Full-Time
 Must be able to obtain and maintain a DOJ Public Trust
 


Nationwide IT Services (NIS) is a leading provider of cybersecurity, cloud, software engineering, infrastructure, and mission support services to Federal agencies. Our employees support some of the government's most critical missions through innovative technology solutions and operational excellence.

NIS is seeking an experienced Cybersecurity Lead Incident Response Coordinator to support the Department of Justice (DOJ), Executive Office for Immigration Review (EOIR). This individual serves as the Program Manager and on-site supervisor while providing senior-level cybersecurity leadership supporting vulnerability management, incident response, security operations, and cybersecurity compliance activities.


The Cybersecurity Lead Incident Response Coordinator serves as the technical lead and primary point of contact for the contractor team supporting EOIR's cybersecurity operations. This individual is responsible for coordinating cybersecurity activities, overseeing incident response efforts, supervising contractor personnel, and serving as the primary liaison with Government leadership.
The position combines approximately 70% technical cybersecurity support with 30% program management and team leadership responsibilities.

• Serve as the Program Manager and on-site supervisor for the NIS cybersecurity team.
• Coordinate daily activities and priorities with Government stakeholders.
• Lead cybersecurity incident response activities through the complete incident lifecycle.
• Direct incident investigation, containment, eradication, recovery, and post-incident reporting.
• Oversee enterprise vulnerability management activities.
• Review and prioritize vulnerability findings and remediation activities.
• Coordinate vulnerability scanning and reporting activities.
• Analyze security events, indicators of compromise, and emerging threats.
• Perform threat analysis and security event correlation.
• Coordinate with DOJ cybersecurity organizations and security operations personnel.
• Develop and maintain:
  • Incident Response Plans
  • Vulnerability Management Plans
  • Standard Operating Procedures (SOPs)
  • Lessons Learned documentation
• Develop executive dashboards, reports, and cybersecurity metrics.
• Support cybersecurity audits, assessments, and compliance initiatives.
• Provide technical guidance and mentoring to junior cybersecurity staff.
• Support continuous monitoring and cybersecurity program improvement initiatives.
• Ensure all contractual deliverables are completed on schedule and meet quality standards.

•  in Cybersecurity, Computer Science, Information Systems, or a related technical discipline.
•  for the contractor team.
• Experience leading enterprise cybersecurity incident response efforts.
• Experience with vulnerability management and remediation.
• Experience using enterprise SIEM and security monitoring tools.
• Experience developing cybersecurity documentation, SOPs, and security procedures.
• Experience supporting Federal cybersecurity programs.
• Strong analytical, organizational, and communication skills.
• Ability to communicate effectively with executive Government leadership.
• Must be able to obtain and maintain a DOJ Public Trust clearance.

• CISSP
• GIAC certification
• Security+
• CEH
• Splunk certification
• Experience with:
  • Splunk
  • Tenable Security Center
  • Nessus
  • SOAR platforms
  • ServiceNow
  • JIRA
• Experience supporting DOJ or other Federal civilian agencies.

• Competitive salary
• Comprehensive health benefits
• Paid Time Off
• Paid Federal Holidays
• 401(k) with company match
• Training and certification assistance
• Career advancement opportunities
• Opportunity to support a mission-critical Federal cybersecurity program