• Driving technical and operational effectiveness by evaluating cyber defense capabilities, conducting control assessments, identifying gaps, establishing metrics, and aligning with organizational security objectives.
• Leading continuous improvement initiatives through process analysis, architectural improvements, workflow optimization, and capability enhancement roadmaps.
• Enhancing incident response capabilities by designing procedures and playbooks, developing standardized approaches for different incident types, establishing escalation paths, and coordinating cross-functional response activities.
• • Improving situational awareness through effective reporting templates, actionable security dashboards, real-time visibility mechanisms, and contextual intelligence distribution.
• Optimizing security tool usage by maximizing SIEM effectiveness, fine-tuning correlation rules, synthesizing multi-source data, ensuring system integration, and recommending enhancements.
• Implementing security automation by identifying suitable processes, designing workflows, developing scripts, implementing automated responses, and documenting procedures.
• Managing the security reporting lifecycle from data collection to distribution, ensuring timely delivery, implementing feedback mechanisms, establishing archival procedures, and meeting compliance requirements.
• Fostering an agile security approach through methodologies like security sprints, retrospectives, iterative development, and balancing agility with compliance requirements.
• Coordinating cross-functional security activities by serving as a liaison between teams, aligning initiatives with organizational goals, facilitating knowledge sharing, and building stakeholder relationships.
• Leading security tool integration through architecture design, API implementation, data normalization, integration testing, and documentation.
• Driving security data analytics by developing collection strategies, implementing advanced analytics, creating visualizations, designing KPIs, and leveraging data for decision-making.
• Managing security automation development by establishing coding standards, ensuring proper testing, implementing change management, and documenting solutions.
• This SETA role provides technical and programmatic support to government teams by translating mission needs into technical requirements, managing those requirements, and shaping strategic program direction. Responsibilities include contract support (SOWs, RFPs, cost proposals), performance monitoring, stakeholder coordination, and communicating complex concepts through reports, meetings, and senior-level briefings. The team ensures projects stay on track by overseeing cost, schedule, and performance.

• Active Top Secret/SCI clearance with Polygraph.
• US Citizenship is required. 
• Bachelor's degree + 6 years of experience OR Master’s Degree + 4 years of experience OR PhD + 2 years of experience OR High School Diploma/GED + 10 years of experience OR Associate's degree + 8 years of experience
• Experience concentrating on overall technical and operational effectiveness of capabilities.
• Experience providing recommendation on continuous improvement of the processes and architecture supporting the overall Cyber Defense operational activities including, but not limited to, analysis, incident handling and reporting products, and the reporting lifecycle.
• Experience providing effective incident response capabilities, usable and effective reports that address overall situational awareness.
• Experience maximizing the use of tools to correlate information and synthesize data into usable and actionable events.
• Experience identifying and providing an agile approach to the automation of any manual or efficient processes that exist across the cyber defense program

• IC experience is highly desirable.
• Experience with having successfully demonstrated the ability to independently conduct the appropriate analysis to offer recommendations, solutions, and alternatives to resolve issues, concerns, problems, or methods.
• Experience in establishing strong working relationships with program managers as well as organization leadership; tracking task order efforts to rapidly identify and resolve potential and new problems; and identifying and resolving administrative and contractual issues related to a support services contract.
• Ability to solve problems in a rapidly changing environment, and interface with customers directly. 
• Strong understanding of intelligence disciplines, methodologies, and the intelligence cycle. 
• Ability to work in a fast paced, dynamic, and team environment.

Noblis and our wholly owned subsidiaries, Noblis ESI, and Noblis MSD tackle the nation's toughest problems and apply advanced solutions to our clients' most critical missions. We bring the best of scientific thought, management, and engineering expertise together in an environment of independence and objectivity to deliver enduring impact on federal missions. Noblis works with a wide range of government clients in the defense, intelligence and federal civil sectors. Learn more at Noblis -About Us

Why work at a Noblis company?

Our employees find greater meaning in their work and balance the other things in life that matter to them. Our people are our greatest asset. They are exceptionally skilled, knowledgeable, team-oriented, and mission-driven individuals who want to do work that matters and benefits the public. Noblis has won numerous workplace awards. Noblis maintains a drug-free workplace.

*Remote/hybrid status is subject to change based on Noblis and/or government requirements

All qualified applicants will receive consideration for employment without regard to race, color, ethnicity, sex, age, national origin, religion, physical or mental disability, pregnancy/childbirth and related medical conditions, veteran or military status, or any other characteristics protected by applicable federal, state, or local law.

If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact us.

EEO is the Law |  E-Verify  |  Right to Work

At Noblis we recognize and reward your contributions, provide you with growth opportunities, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, and work-life programs. Our award programs acknowledge employees for exceptional performance and superior demonstration of our service standards. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in our benefit programs. Other offerings may be provided for employees not within this category. We encourage you to learn more about our total benefits by visiting the Benefits page on our Careers site.

Compensation at Noblis is determined by various factors, including but not limited to, the combination of education, certifications, knowledge, skills, competencies, and experience, internal and external equity, location, clearance level, as well as contract-specific affordability, organizational requirements and applicable employment laws. The projected compensation range for this position is based on full time status. For part time or on-call staff, compensation is proportionately adjusted based on hours worked. While monetary compensation is important, it's just one component of Noblis’ total compensation package.

• Driving technical and operational effectiveness by evaluating cyber defense capabilities, conducting control assessments, identifying gaps, establishing metrics, and aligning with organizational security objectives.
• Leading continuous improvement initiatives through process analysis, architectural improvements, workflow optimization, and capability enhancement roadmaps.
• Enhancing incident response capabilities by designing procedures and playbooks, developing standardized approaches for different incident types, establishing escalation paths, and coordinating cross-functional response activities.
• • Improving situational awareness through effective reporting templates, actionable security dashboards, real-time visibility mechanisms, and contextual intelligence distribution.
• Optimizing security tool usage by maximizing SIEM effectiveness, fine-tuning correlation rules, synthesizing multi-source data, ensuring system integration, and recommending enhancements.
• Implementing security automation by identifying suitable processes, designing workflows, developing scripts, implementing automated responses, and documenting procedures.
• Managing the security reporting lifecycle from data collection to distribution, ensuring timely delivery, implementing feedback mechanisms, establishing archival procedures, and meeting compliance requirements.
• Fostering an agile security approach through methodologies like security sprints, retrospectives, iterative development, and balancing agility with compliance requirements.
• Coordinating cross-functional security activities by serving as a liaison between teams, aligning initiatives with organizational goals, facilitating knowledge sharing, and building stakeholder relationships.
• Leading security tool integration through architecture design, API implementation, data normalization, integration testing, and documentation.
• Driving security data analytics by developing collection strategies, implementing advanced analytics, creating visualizations, designing KPIs, and leveraging data for decision-making.
• Managing security automation development by establishing coding standards, ensuring proper testing, implementing change management, and documenting solutions.
• This SETA role provides technical and programmatic support to government teams by translating mission needs into technical requirements, managing those requirements, and shaping strategic program direction. Responsibilities include contract support (SOWs, RFPs, cost proposals), performance monitoring, stakeholder coordination, and communicating complex concepts through reports, meetings, and senior-level briefings. The team ensures projects stay on track by overseeing cost, schedule, and performance.

• Active Top Secret/SCI clearance with Polygraph.
• US Citizenship is required. 
• Bachelor's degree + 6 years of experience OR Master’s Degree + 4 years of experience OR PhD + 2 years of experience OR High School Diploma/GED + 10 years of experience OR Associate's degree + 8 years of experience
• Experience concentrating on overall technical and operational effectiveness of capabilities.
• Experience providing recommendation on continuous improvement of the processes and architecture supporting the overall Cyber Defense operational activities including, but not limited to, analysis, incident handling and reporting products, and the reporting lifecycle.
• Experience providing effective incident response capabilities, usable and effective reports that address overall situational awareness.
• Experience maximizing the use of tools to correlate information and synthesize data into usable and actionable events.
• Experience identifying and providing an agile approach to the automation of any manual or efficient processes that exist across the cyber defense program