Defensive Cyber Operations Service Line Leader

MANTECH seeks a Defensive Cyber Operations Service Line Leader to join our team in Herndon, VA (Hybrid).

The Defensive Cyber Operations Service Line Leader will serve as a pivotal, dual-impact leader combining deep technical domain authority with comprehensive operational and personnel management to drive the strategic success of the Defensive Cyber Operations Service Line. Operating within MANTECH's Technology and Capabilities Organization, this leader will own the overarching technical vision, talent health, service line utilization, tech sensing, and enterprise capability readiness across Department of War, Intelligence, and Federal Civilian accounts.

Embracing the mission of "Proactive Security, Continuous Operational Resilience," you will drive the architecture and deployment of resilient defense solutions aligned with federal standards. You will be responsible for engineering modular, dynamic defense architectures that protect critical federal infrastructure, weapon systems, and data assets, while overseeing modern Security Operations Center (SOC) support, proactive threat hunting, adversarial emulation, Attack Surface Management (ASM), and Cyber Threat Intelligence (CTI) integration.

Responsibilities include but are not limited to:

• Direct Service Line activities from executive Practice guidance, converting demand signals into capability investments, IRAD priorities, and hiring plans while maintaining full responsibility for Service Line utilization targets.
• Review complex technical deliverables, resolve interpersonal issues, provide coaching, advocate for promotions, and foster professional development.
• Lead workload and resource planning for personnel and technical infrastructure to balance client needs with team capacity.
• Lead technical planning and solutioning for key client projects and capture opportunities, assigning SMEs to programs and scaling involvement based on risk.
• Monitor market trends and partner with the CTO to set capability and IRAD priorities, promote asset reuse, and support industry conference participation.
• Build technical eminence through whitepapers and technical forums while maintaining strategic relationships with client leaders, academia, and commercial partners.
• Provide strategic insights to guide Cyber Practice strategy and foster execution across multiple simultaneous billable, pre-sales, and internal development activities.

Minimum Qualifications:

• Bachelor's degree in Computer Science, Cybersecurity, Systems Engineering, Business, or a related technical discipline.
• 10+ years of relevant technical, operational, and leadership experience within DoD, Intelligence Community, or Federal Civilian cybersecurity sectors.
• Proven track record leading multidisciplinary technical teams, managing resource utilization, and supporting business development, capture, and proposal lifecycles.
• Ability to execute against multiple simultaneous activities, including billable projects, capture/pre-sales support, and IRAD/internal development.
• Strong ability to monitor and drive Service Line Key Performance Indicators (KPIs).
• Exceptional ability to brief executive government clients, internal leadership, and technical teams with clarity and authority.

Preferred Qualifications:

• Deep subject matter expertise in Defensive Cyber Operations, engineering modular and dynamic defense architectures, SOC Operations, Threat Hunting, Attack Surface Management (ASM), Cyber Threat Intelligence (CTI), or Adversarial Emulation.
• Proven experience in designing dynamic defense architectures for high-value targets across classified and unclassified environments.
• Strong background in integrating threat intelligence and adversarial emulation into proactive threat-hunting operations.

Clearance Requirements:

• Must have a current/ active Top Secret / SCI clearance

Physical Requirements:

• Constantly operates a computer and other productivity machinery.
• Must be able to remain in a stationary position for prolonged periods.
• Travel may be required to support client meetings, technical demonstrations, or proposal efforts.