Intermediate Cybersecurity Analyst

Diné Development Corporation; United States; On-site; USD 100,000 - 145,000; Full time

Benefits offered by this job

Medical, dental, vision

Retirement with company match

Paid time off

Job summary

Diné Development Corporation (DDC) is seeking an intermediate-level cybersecurity professional to support AFOSI information assurance activities. You will assist with RMF A&A packages, security controls, vulnerability management, and security documentation under experienced staff guidance.

Requirements include 5 years in cybersecurity with 3 in systems administration, an active TS clearance with SCI eligibility, and DoD 8570/8140 IAT II certification or ability to obtain it.

Qualifications

• 5 years of cybersecurity and information assurance experience, incl. 3 years in systems administration.
• Associate's or Bachelor's in relevant field preferred; equivalent training/experience considered.
• Active Top Secret clearance and SCI eligibility.
• DoD 8570/8140 IAT Level II certification or ability to obtain it within contract timeframe.
• Foundational RMF knowledge, STIGs, controls, POA&M tracking, and vulnerability assessments.

Responsibilities

• Design and implement security solutions; manage vulnerability scanning architecture.
• Engineer SIEM and integrate security testing into development pipelines.
• Maintain RMF A&A packages and supporting security docs for AFOSI systems.
• Monitor security controls; document findings; track remediation via POA&M.
• Support vulnerability scans, report reviews, asset-list maintenance, and patching.
• Correlate vulnerability results with IAVM alerts and CVEs for compliance.
• Review configurations against DISA STIGs and Security Guidance.
• Maintain eMASS artifacts and governance records; prepare reports.
• Assist with security-log review and basic PowerShell data collection.

Skills

RMF knowledge

Security controls

Vulnerability management

Documentation skills

Communication skills

Analytical problem-solving

U.S. citizenship

Education

Associate's or Bachelor's degree in cybersecurity, IT, CS

Tools

ACAS/Tenable

HBSS

Splunk

ArcSight

PowerShell

eMASS

GRC applications

Active Directory

Job description

Position Overview : Provides intermediate-level cybersecurity and information assurance support for the US Air Force Office of Special Investigations (AFOSI). Under the direction of experienced cybersecurity personnel, assists with Risk Management Framework (RMF) Assessment and Authorization packages, security control implementation and monitoring, vulnerability management, compliance documentation, and security reporting. Supports AFOSI cybersecurity operations by helping maintain system security documentation and by coordinating with infrastructure, operations, and development teams to address Department of Defense security requirement

Responsibilities

• Provide technical engineering and implementation of security solutions. This includes designing and managing vulnerability scanning architecture, engineering the Security Information and Event Management (SIEM) solution, integrating security testing into the development pipeline, defining secure configuration baselines, and developing technical documentation for security architecture.
• Assist with building, coordinating, maintaining, and updating RMF Assessment and Authorization packages and supporting security documentation for AFOSI systems and enclaves.
• Assist with implementing and monitoring security controls, documenting findings, and tracking remediation activities through the Plan of Action and Milestones process.
• Support vulnerability scanning, report review, asset-list maintenance, scan scheduling, and identification of configuration issues and missing patches using ACAS or comparable tools.
• Help correlate vulnerability results with IAVM alerts, bulletins, and Common Vulnerabilities and Exposures to support compliance tracking.
• Support reviews of system and application configurations against applicable DISA Security Technical Implementation Guides and Security Requirements Guidance.
• Assist with maintaining Governance, Risk and Compliance records and eMASS artifacts, including policies, plans, procedures, reports, and authorization documentation.
• Assist with security-log review and reporting using SIEM tools such as Splunk or ArcSight and use basic PowerShell scripts to collect and organize security data.
• Collaborate with cybersecurity, infrastructure, operations, and development personnel; communicate findings clearly; and support readiness assessments and incident-response activities as assigned.

Qualifications

• Years of Experience: 5 years of experience in cybersecurity and information assurance, including at least 3 years of systems administration experience supporting servers and infrastructure.
• Education Level: Associate's or bachelor's degree in cybersecurity, information technology, computer science, or a related field preferred; equivalent technical training and relevant experience considered.
• Clearance Requirements: Must have an active Top Secret clearance and be SCI eligible.
• Certification Requirements: Must possess an approved DoD 8570/8140 IAT Level II certification or be able to obtain the required certification within the timeframe permitted by the contract.
• Any other work-related qualifications needed for the role: Foundational knowledge of RMF, STIGs, security controls, vulnerability management, POA&M tracking, event-log review, firewalls, and security risk assessments. Familiarity with eMASS, GRC applications, ACAS/Tenable, HBSS, Splunk, ArcSight, Active Directory, PowerShell, and asset-management tools is preferred rather than required. Must demonstrate attention to detail, analytical problem-solving skills, effective oral and written communication, the ability to learn DoD cybersecurity processes and tools, and U.S. citizenship.

***Salary Range 100-145K***

About Us

Diné Development Corporation (DDC) is a Navajo Nation-owned family of companies that provides government agencies and commercial organizations with high-quality IT, professional, environmental, and research and development services. DDC is dedicated to empowering the Navajo Nation and the communities we serve.

Benefits

Eligible full-time employees receive a comprehensive benefits package, including medical, dental, vision, life and disability coverage, retirement savings with company match, and paid time off. Additional benefits include voluntary supplemental benefits, access to an employee assistance program, and educational assistance with tuition reimbursement.

Equal Opportunity & Compliance Statement

This contractor and subcontractor shall abide by the requirements of 41 CFR 60-1.4(a), 60-300.5(a), and 60-741.5(a). These regulations prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities, and prohibit discrimination against all individuals based on their race, color, religion, sex, sexual orientation, gender identity, national origin, or for inquiring about, discussing, or disclosing information about compensation, or any other basis prohibited by law.

We participate in E-Verify.

DDC is committed to providing equal employment opportunities to all applicants and employees. If you require a reasonable accommodation to participate in the application or interview process, please contact Recruiting for assistance [e-mail]