Cybersecurity Operations Lead | Incident Response & SIEM

Dine Development Corporation; Washington (District of Columbia); Presencial; USD 148.000 - 168.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Medical insurance

Dental insurance

Vision insurance

Life insurance

Disability coverage

Retirement with company match

Paid time off

Tuition reimbursement

Descripción de la vacante

Din Development Corporation (DDC) seeks a Cybersecurity Operations Lead to direct monitoring, incident response, and remediation for federal cybersecurity programs. You will oversee security event analysis, triage, and containment, coordinating with cross-functional teams during incidents and ensuring documentation and records are up to date.

The ideal candidate holds a Bachelor's degree with 8+ years in cybersecurity, with at least 5 years supporting federal programs, and a U.S.

Formación

• Bachelor's degree and at least 8 years in cybersecurity, including cybersecurity operations, incident response, or SOC environments.
• U.S. citizen; favorable Tier 2 Public Trust adjudication required before performance.
• CISSP or equivalent. Security Operations Analyst Associate or GCIH preferred.
• SIEM/log analysis, incident response, vulnerabilities, FISMA/FedRAMP, Zero Trust and cross-functional cyber coverage.

Responsabilidades

• Lead monitoring and analysis of security events, logs, and alerts using Microsoft Sentinel, Defender, Qualys, and other agency security tools.
• Direct incident triage, investigation, escalation, containment, and recovery coordination; maintain documented response procedures and incident records.
• Track the PWS incident response measures: triage within 15 minutes, response within two hours, and containment within four hours during required business hours.
• Analyze vulnerabilities, prioritize remediation with infrastructure owners, validate mitigations, and track unresolved security risks.
• Coordinate insider threat monitoring, privileged access oversight, and endpoint and cloud security response with the Microsoft 365 specialist.
• Maintain operational security inputs for CDM dashboards and authorization evidence; work with the risk analyst on POA&M status and mitigation records.
• Prepare monthly threat reports, coordinate monthly POA&M updates and quarterly CDM integration status reporting, and brief the Project Manager and agency security leadership.
• Provide qualified backup coverage across cybersecurity functions and maintain operational documentation and knowledge transfer.

Conocimientos

SIEM/log analysis

Incident response

Vulnerabilities

Zero Trust

FedRAMP

Cross-functional

Educación

Bachelor's degree

Descripción del empleo

Din Development Corporation (DDC) seeks a Cybersecurity Operations Lead to direct monitoring, incident response, and remediation for federal cybersecurity programs. You will oversee security event analysis, triage, and containment, coordinating with cross-functional teams during incidents and ensuring documentation and records are up to date.

The ideal candidate holds a Bachelor's degree with 8+ years in cybersecurity, with at least 5 years supporting federal programs, and a U.S.