Associate Chief Information Officer for Security Operations

This position serves as the Associate Chief Information Officer for Security Operations and reports to the Deputy Administrator for Technology Services Operations, and is responsible for leading and managing all functions of the Treasury Security Operation Center (TSOC). The TSOC provides threat defense, threat detection, threat intelligence, digital forensics, and incident response functions for both unclassified and classified systems.

As Associate Chief Information Officer for Security Operations, you will: Lead a cross-functional team of Departmental stakeholders to identify and implement protective controls that minimize Treasury's attack surface, reduce critical points of exposure, increase the efficacy of existing/new technical countermeasures, and drive cost effectiveness through the development of economies of scale. Operate a set of technical capabilities that ingest signal from internal sensors (e.g., endpoint agents, proxies, firewalls, packet capture, netflow) and capture telemetry from external sources (e.g., vulnerability scans, vulnerability disclosures, third parties). to identify threats. Oversee all activities as captured in the Departmental incident response plan, including but not limited to incident characterization, incident severity determination, and incident declaration, along with containment, eradication, and post-mortem analysis/actions. The incumbent shall use digital forensics to support these activities. Oversee and manage the Security Operations Center budget. Lead the work of a subordinate a hybrid staff of federal/contracted practitioners and specialists that are focused on ensuring the confidentiality, integrity, and availability of all Treasury's classified and unclassified systems. Communicate to the Deputy Administrator, Treasury Chief Information Officer and Treasury Chief Information Security Officer, and other program and policy officials regarding Treasury's active defense activities. Provides authoritative recommendations and solutions to problems and challenges with respect to federal mandates/legislation, risk management, and improvement of operational capabilities.