Cybersecurity Operations Lead

Ddc Dine; Washington (District of Columbia); On-site; USD 148,000 - 168,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Retirement match

Paid time off

Job summary

Diné Development Corporation (DDC) in Washington, DC, seeks a Cybersecurity Operations Lead to direct monitoring, incident response, and remediation across federal programs. You will oversee SIEM, endpoint, and cloud security operations and coordinate with Defender and Qualys tools. The role requires a Bachelor’s degree and 8+ years of cybersecurity experience, U.S.

citizenship, and Tier 2 Public Trust. CISSP or equivalent certification is required or preferred.

Qualifications

• Bachelor’s degree and at least 8 years of cybersecurity experience, including SOC or operations.
• U.S. citizen; favorable Tier 2 Public Trust adjudication required.
• CISSP or equivalent certification required or preferred.
• Experience with SIEM/log analysis and vulnerability management.

Responsibilities

• Lead monitoring and analysis of security events, logs, and alerts using SIEM tools.
• Direct incident triage, investigation, escalation, containment, and recovery efforts.
• Track PWS incident response measures: triage in 15 minutes, response in 2 hours, containment in 4 hours.
• Analyze vulnerabilities, prioritize remediation with owners, validate mitigations.
• Coordinate insider threat monitoring and cloud endpoint security responses.
• Maintain inputs for CDM dashboards and POA&M status; brief leadership.
• Provide qualified backup coverage across cybersecurity functions and document knowledge transfer.

Skills

Incident response

SOC operations

Security monitoring

Federal programs

Vulnerability management

Education

Bachelor's degree

CISSP or equivalent certification

Tools

Microsoft Sentinel

Microsoft Defender

Qualys

Job description

## Cybersecurity Operations LeadApply: Washington, DC: Full time: Posted Today: JR100452The Cybersecurity Operations Lead directs cybersecurity monitoring, incident response, vulnerability remediation, and operational security reporting for DNFSB. **\\*\\*\\*This position is contingent upon contract award.\\*\\*\\*** **Responsibilities*** Lead monitoring and analysis of security events, logs, and alerts using Microsoft Sentinel, Defender, Qualys, and other agency security tools.* Direct incident triage, investigation, escalation, containment, and recovery coordination; maintain documented response procedures and incident records.* Track the PWS incident response measures: triage within 15 minutes, response within two hours, and containment within four hours during required business hours.* Analyze vulnerabilities, prioritize remediation with infrastructure owners, validate mitigations, and track unresolved security risks.* Coordinate insider threat monitoring, privileged access oversight, and endpoint and cloud security response with the Microsoft 365 specialist.* Maintain operational security inputs for CDM dashboards and authorization evidence; work with the risk analyst on POA&M status and mitigation records.* Prepare monthly threat reports, coordinate monthly POA&M updates and quarterly CDM integration status reporting, and brief the Project Manager and agency security leadership.* Provide qualified backup coverage across cybersecurity functions and maintain operational documentation and knowledge transfer.**Qualifications*** Education and Experience: Bachelor’s degree and at least 8 years of relevant cybersecurity experience, including cybersecurity operations, incident response, or Security Operations Center (SOC) environments, with at least 5 years supporting federal cybersecurity programs.* Clearance Requirements: U.S. citizen; favorable Tier 2 Public Trust adjudication required before performance.* Certification Requirements: CISSP or equivalent. Security Operations Analyst Associate or GCIH preferred.Any other work-related qualifications needed for the role:* SIEM/log analysis, incident response, vulnerabilities, FISMA/FedRAMP, Zero Trust and cross-functional cyber coverage. Salary Range: $148,000 to $168,000The compensation range listed for this position represents the good faith salary range Diné Development Corporation (DDC) and its subsidiaries reasonably expect to pay for the role, in accordance with applicable state and local pay transparency laws. Actual compensation will be determined based on a variety of factors, including the position's responsibilities, the candidate's education, experience, skills, internal equity, market considerations, and any applicable collective bargaining agreements or legal requirements. **About Us**Diné Development Corporation (DDC) is a Navajo Nation–owned family of companies that provides government agencies and commercial organizations with high-quality IT, professional, environmental, and research and development services. DDC is dedicated to empowering the Navajo Nation and the communities we serve.**Benefits**Eligible full-time employees receive a comprehensive benefits package, including medical, dental, vision, life and disability coverage, retirement savings with company match, and paid time off. Additional benefits include voluntary supplemental benefits, access to an employee assistance program, and educational assistance with tuition reimbursement.