Cybersecurity Operations Lead

RED CANYON TECHNOLOGIES LLC; Washington (District of Columbia); On-site; USD 148,000 - 168,000; Full time

Benefits offered by this job

Medical, dental, vision

Retirement match

Paid time off

Job summary

Diné Development Corporation (DDC) seeks a Cybersecurity Operations Lead to oversee monitoring, incident response, remediation, and security reporting for federal programs. You will coordinate across teams, manage vulnerabilities, and maintain security documentation, ensuring timely containment and recovery.

The role requires at least 8 years in cybersecurity, CISSP or equivalent, and a US citizenship with Tier 2 Public Trust readiness.

Qualifications

• Bachelor’s degree and at least 8 years of cybersecurity experience including incident response/SOC.
• U.S. citizen with favorable Tier 2 Public Trust before performance.
• CISSP or equivalent; Security Operations Analyst Associate or GCIH preferred.

Responsibilities

• Lead monitoring and analysis of security events, logs, and alerts using Microsoft Sentinel, Defender, Qualys, and other tools.
• Direct incident triage, investigation, escalation, containment, and recovery coordination; maintain response procedures.
• Track PWS incident response measures: triage within 15 minutes, response within two hours, containment within four hours.
• Coordinate vulnerability remediation with infrastructure owners and validate mitigations.
• Prepare monthly threat reports and quarterly CDM integration status reporting.

Skills

SIEM/log analysis

Incident response

Cross-functional collaboration

Zero Trust concepts

Security monitoring

Education

Bachelor’s degree

Tools

Microsoft Sentinel

Defender

Qualys

Job description

The Cybersecurity Operations Lead directs cybersecurity monitoring, incident response, vulnerability remediation, and operational security reporting for DNFSB.***This position is contingent upon contract award.***ResponsibilitiesLead monitoring and analysis of security events, logs, and alerts using Microsoft Sentinel, Defender, Qualys, and other agency security tools.Direct incident triage, investigation, escalation, containment, and recovery coordination; maintain documented response procedures and incident records.Track the PWS incident response measures: triage within 15 minutes, response within two hours, and containment within four hours during required business hours.Analyze vulnerabilities, prioritize remediation with infrastructure owners, validate mitigations, and track unresolved security risks.Coordinate insider threat monitoring, privileged access oversight, and endpoint and cloud security response with the Microsoft 365 specialist.Maintain operational security inputs for CDM dashboards and authorization evidence; work with the risk analyst on POA&M status and mitigation records.Prepare monthly threat reports, coordinate monthly POA&M updates and quarterly CDM integration status reporting, and brief the Project Manager and agency security leadership.Provide qualified backup coverage across cybersecurity functions and maintain operational documentation and knowledge transfer.QualificationsEducation and Experience: Bachelor’s degree and at least 8 years of relevant cybersecurity experience, including cybersecurity operations, incident response, or Security Operations Center (SOC) environments, with at least 5 years supporting federal cybersecurity programs.Clearance Requirements: U.S. citizen; favorable Tier 2 Public Trust adjudication required before performance.Certification Requirements: CISSP or equivalent. Security Operations Analyst Associate or GCIH preferred.Any other work-related qualifications needed for the role:SIEM/log analysis, incident response, vulnerabilities, FISMA/FedRAMP, Zero Trust and cross-functional cyber coverage.Salary Range: $148,000 to $168,000The compensation range listed for this position represents the good faith salary range Diné Development Corporation (DDC) and its subsidiaries reasonably expect to pay for the role, in accordance with applicable state and local pay transparency laws. Actual compensation will be determined based on a variety of factors, including the position's responsibilities, the candidate's education, experience, skills, internal equity, market considerations, and any applicable collective bargaining agreements or legal requirements.About UsDiné Development Corporation (DDC) is a Navajo Nation–owned family of companies that provides government agencies and commercial organizations with high-quality IT, professional, environmental, and research and development services. DDC is dedicated to empowering the Navajo Nation and the communities we serve.BenefitsEligible full-time employees receive a comprehensive benefits package, including medical, dental, vision, life and disability coverage, retirement savings with company match, and paid time off. Additional benefits include voluntary supplemental benefits, access to an employee assistance program, and educational assistance with tuition reimbursement.Equal Opportunity & Compliance StatementThis contractor and subcontractor shall abide by the requirements of 41 CFR 60-1.4(a), 60-300.5(a), and 60-741.5(a). These regulations prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities, and prohibit discrimination against all individuals based on their race, color, religion, sex, sexual orientation, gender identity, national origin, or for inquiring about, discussing, or disclosing information about compensation, or any other basis prohibited by law.We participate in E-Verify.DDC is committed to providing equal employment opportunities to all applicants and employees. If you require a reasonable accommodation to participate in the application or interview process, please contact Recruiting for assistance [e-mail]