Cybersecurity Ops Lead - Incident Response & Monitoring

Ddc Dine; Washington (District of Columbia); In loco; USD 148.000 - 168.000; Tempo pieno

Vantaggi offerti da questo lavoro

Medical insurance

Dental insurance

Vision insurance

Retirement match

Paid time off

Descrizione del lavoro

Diné Development Corporation (DDC) in Washington, DC, seeks a Cybersecurity Operations Lead to direct monitoring, incident response, and remediation across federal programs. You will oversee SIEM, endpoint, and cloud security operations and coordinate with Defender and Qualys tools. The role requires a Bachelor’s degree and 8+ years of cybersecurity experience, U.S.

citizenship, and Tier 2 Public Trust. CISSP or equivalent certification is required or preferred.

Competenze

• Bachelor’s degree and at least 8 years of cybersecurity experience, including SOC or operations.
• U.S. citizen; favorable Tier 2 Public Trust adjudication required.
• CISSP or equivalent certification required or preferred.
• Experience with SIEM/log analysis and vulnerability management.

Mansioni

• Lead monitoring and analysis of security events, logs, and alerts using SIEM tools.
• Direct incident triage, investigation, escalation, containment, and recovery efforts.
• Track PWS incident response measures: triage in 15 minutes, response in 2 hours, containment in 4 hours.
• Analyze vulnerabilities, prioritize remediation with owners, validate mitigations.
• Coordinate insider threat monitoring and cloud endpoint security responses.
• Maintain inputs for CDM dashboards and POA&M status; brief leadership.
• Provide qualified backup coverage across cybersecurity functions and document knowledge transfer.

Conoscenze

Incident response

SOC operations

Security monitoring

Federal programs

Vulnerability management

Formazione

Bachelor's degree

CISSP or equivalent certification

Strumenti

Microsoft Sentinel

Microsoft Defender

Qualys

Descrizione del lavoro

Diné Development Corporation (DDC) in Washington, DC, seeks a Cybersecurity Operations Lead to direct monitoring, incident response, and remediation across federal programs. You will oversee SIEM, endpoint, and cloud security operations and coordinate with Defender and Qualys tools. The role requires a Bachelor’s degree and 8+ years of cybersecurity experience, U.S.

citizenship, and Tier 2 Public Trust. CISSP or equivalent certification is required or preferred.