Cyber Security SME

Dine Development Corporation; Washington (District of Columbia); On-site; USD 183,000 - 213,000; Full time

Benefits offered by this job

Medical, dental, vision coverage

Retirement with company match

Paid time off

Tuition reimbursement

Job summary

Din Development Corporation (DDC) seeks a Cyber Security SME in Washington, DC for senior cybersecurity engineering, assessment, risk, policy, and security testing to protect government systems and achieve compliance with NIST, FISMA, NSS and related requirements.

This full-time role requires 8+ years of experience, a Master's degree, Secret clearance or higher, and a CISSP or equivalent certification. Salary range shown, with comprehensive benefits and a contingent upon award status.

Qualifications

• Minimum 8 years of cybersecurity experience.
• Master's degree in IT, Cybersecurity, CS, Business Management, or related field.
• Secret clearance or higher.
• CISSP or similar cybersecurity certification.
• Strong working knowledge of RMF, FISMA, security control assessment, vulnerability management, SSP/ATO artifacts, risk analysis, security testing, and federal policy.

Responsibilities

• Provide enhancement capabilities and SOPs for cybersecurity assessment operations and implementation.
• Maintain the integrity and confidentiality of security assessment processes and analyze vulnerabilities.
• Review requirements specs, system architectures, design documents, test plans, security plans, and other program docs.
• Develop and document security evaluation test plans, procedures, and methodologies.
• Help develop information security policies, procedures, guidance, and governance artifacts.
• Conduct hands-on security testing; analyze results; document risk; identify threats and vulnerabilities; recommend mitigations.
• Coordinate security testing activities with ISSOs, system owners, architecture teams, engineering teams, and other stakeholders.
• Participate in or lead technical exchange meetings; document actions and results; brief leadership on findings.
• Provide oversight and technical guidance for design, development, and implementation of security-related support systems.
• Support IA engineering, risk and vulnerability assessments, continuous monitoring, ATO/RMF documentation, remediation planning, and incorporation of security requirements into system design.

Skills

RMF knowledge

FISMA

Security control assessment

Vulnerability management

Risk analysis

Security testing

Federal cybersecurity policy

Education

Master's degree in IT/Cybersecurity/CS/Business Management

Tools

CISSP

Job description

Job Title: Cyber Security SME

Location : Washington, DC

Position Type: Full time

Description:

The Cyber Security Engineer provides senior cybersecurity engineering, assessment, risk, policy, and security-testing expertise to protect government systems, data, and networks and maintain compliance with NIST, FISMA, National Security System (NSS), and related federal cybersecurity requirements. The position supports security evaluation, vulnerability analysis, risk determination, remediation recommendations, technical exchanges, and leadership briefings across classified and unclassified environments.

** This Position is Contingent Upon Award

Responsibilities

• Provide enhancement capabilities and standard operating procedures (SOPs) for cybersecurity assessment operations and implementation.
• Maintain the integrity and confidentiality of security assessment processes and analyze system and application vulnerabilities.
• Review and provide recommendations on requirements specifications, system architectures, design documents, test plans, security plans, and other program-level cybersecurity documentation.
• Develop and document security evaluation test plans, procedures, and assessment methodologies.
• Research, evaluate, and help develop information security policies, procedures, guidance, and governance artifacts.
• Conduct hands-on security testing; analyze results; document risk; identify threats, vulnerabilities, and shortfalls; and recommend mitigating countermeasures.
• Coordinate security testing activities with ISSOs, system owners, architecture teams, engineering teams, and other cybersecurity stakeholders.
• Participate in or lead technical exchange meetings, document action items and results, and brief leadership on cybersecurity activities and findings.
• Provide oversight and technical guidance for the design, development, and implementation of security-related support systems and capabilities.
• Support IA engineering, risk and vulnerability assessments, continuous monitoring, ATO/RMF documentation, remediation planning, and incorporation of security requirements into system design and configuration baselines.
• Other duties as assigned.

Qualifications

• Years of Experience: Minimum 8 years of cybersecurity experience.
• Education Level: Master's degree (MS/MA) in Information Technology, Cybersecurity, Computer Science, Business Management, or a related field.
• Clearance Requirements: Secret clearance or higher.
• Certification Requirements: CISSP or similar recognized cybersecurity certification.
• Any other work-related qualifications needed for the role: Strong working knowledge of RMF, FISMA, security control assessment, vulnerability management, SSP/ATO artifacts, risk analysis, security testing, and federal cybersecurity policy. Must communicate technical findings clearly to both technical stakeholders and leadership and be able to work across government/contractor teams.

Salary Range: $183,000 to $213,000

The compensation range listed for this position represents the good faith salary range Din Development Corporation (DDC) and its subsidiaries reasonably expect to pay for the role, in accordance with applicable state and local pay transparency laws. Actual compensation will be determined based on a variety of factors, including the position's responsibilities, the candidate's education, experience, skills, internal equity, market considerations, and any applicable collective bargaining agreements or legal requirements.

About Us

Din Development Corporation (DDC) is a Navajo Nationowned family of companies that provides government agencies and commercial organizations with high-quality IT, professional, environmental, and research and development services. DDC is dedicated to empowering the Navajo Nation and the communities we serve.

Benefits

Eligible full-time employees receive a comprehensive benefits package, including medical, dental, vision, life and disability coverage, retirement savings with company match, and paid time off. Additional benefits include voluntary supplemental benefits, access to an employee assistance program, and educational assistance with tuition reimbursement.

Equal Opportunity & Compliance Statement

This contractor and subcontractor shall abide by the requirements of 41 CFR 60-1.4(a), 60-300.5(a), and 60-741.5(a). These regulations prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities, and prohibit discrimination against all individuals based on their race, color, religion, sex, sexual orientation, gender identity, national origin, or for inquiring about, discussing, or disclosing information about compensation, or any other basis prohibited by law.

We participate in E-Verify.

DDC is committed to providing equal employment opportunities to all applicants and employees. If you require a reasonable accommodation to participate in the application or interview process, please contact Recruiting for assistance [e-mail]