Deputy Project Manager, Technical Lead

This is a fully remote position, open to applicants in Florida.

📋 Description

• Report to the Project Manager and act as the second-in-command for the program.

• Serve as the technical lead for cybersecurity testing initiatives.

• Translate program goals into actionable testing strategies and comprehensive procedures.

• Create and manage the Testing Strategy and Detailed Testing Procedures, which include the pre-approved technique catalog and rules of engagement.

• Maintain ownership of the traceability matrix that connects tests to MITRE ATT&CK techniques, NIST CSF subcategories, regulatory requirements, and anticipated telemetry sources.

• Oversee emission, observation, and outcome reconciliation across multiple concurrent agency engagements.

• Review findings and root cause classifications prior to client release.

• Establish and enforce testing safety controls, risk ratings, rollback procedures, deconfliction contacts, and stop-work triggers.

• Act as the primary technical point of contact for agency security and information technology personnel.

• Ensure that testing stays within the approved scope and obtain written client approval for any changes.

• Assist in executive and audit briefings regarding testing methodology, results, cybersecurity risks, and findings.

• Aid the Project Manager with program management tasks and assume the Project Manager's responsibilities when necessary.

• Coordinate technical execution across multiple concurrent agency engagements.

⛳️ Requirements

• A minimum of 3 years of experience in cybersecurity consulting, assessment, audit, or security operations.

• Experience acting as a technical point of contact or coordinating technical testing activities on at least one engagement.

• Familiarity with contributing to cybersecurity testing procedures, playbooks, or assessment methodologies.

• Exposure to detection validation, purple teaming, or security operations activities that extend beyond configuration-based compliance assessments.

• Proven experience in developing and maintaining cybersecurity testing procedures, playbooks, and evidence standards.

• Hands-on experience with penetration testing, configuration reviews, cloud assessments, or validating security controls.

• Working knowledge of detection engineering and testing the effectiveness of SIEM solutions.

• Understanding of MITRE ATT&CK, Atomic Red Team, or MITRE CALDERA.

• Experience in creating risk-based testing plans that align with NIST CSF control categories.

• Strong working knowledge of Active Directory, Windows security architecture, Microsoft Entra ID, major cloud platforms, identity management, and logging and monitoring technologies.

• Demonstrated capability to coordinate technical activities across various agencies and testing environments simultaneously.

• Experience in creating testing procedures, scripts, playbooks, and evidence collection methodologies.

• Exceptional technical writing abilities.

• Experience briefing executive leadership and audit personnel on cybersecurity risks and findings.

• Must reside in the state of Florida.

• Must possess at least one of the following certifications: Security+, CySA+, GSEC, CEH, PenTest+, or GCIH.

• Legally authorized to work in the United States without current or future employer sponsorship.

🏝️ Benefits

• Funded certification pathway.

• Direct exposure to senior technical practitioners.

• Opportunity to take ownership and engage directly with clients and leadership.

• Contribute to meaningful government mission work.

• Remote work availability for candidates based in Florida.