Senior Security Engineer

NOVA DINE LLC; Washington (District of Columbia); On-site; USD 102,000 - 132,000; Full time

Benefits offered by this job

Medical, dental, vision insurance

Life and disability coverage

401(k) with company match

Paid time off

Job summary

Diné Development Corporation (DDC) is seeking a Senior Security Engineer to advance cyber defense, secure Azure deployments, and strengthen zero-trust controls across enterprise services. You will work with cross-functional security teams to protect sensitive data and maintain compliant cloud architectures in line with federal standards.

The role requires 8+ years in cybersecurity, a Bachelor’s in a related field, and relevant certifications.

Qualifications

• Bachelor’s degree in IT, CS, cybersecurity or related field.
• Secret clearance or higher.
• Security+ or CISSP and Cloud Architect/Engineer certification.
• 8+ years of cybersecurity experience.

Responsibilities

• Develop, enhance, and maintain SOC SOPs and security assessment processes.
• Perform vulnerability analysis and review security documentation; provide senior technical recommendations.
• Lead design, development, and implementation of secure Microsoft Azure solutions; align with NIST, FISMA, FedRAMP, NTIA and Zero Trust.
• Support SOC alert triage, escalation, containment actions, and continuous improvement of detection and response use cases.
• Implement Zero Trust controls across Azure, including identity hardening, micro-segmentation, Conditional Access, RBAC, and governance.

Skills

Cybersecurity engineering

Azure security

Zero Trust

Threat analysis

SOC support

Vulnerability analysis

Security testing

Education

Bachelor’s degree in IT/CS/Cybersecurity

Tools

Azure

Azure AKS

Azure Policy

Azure AD/Entra

RBAC

Conditional Access

Job description

The Senior Security Engineer combines senior cybersecurity engineering, SOC support, security assessment, vulnerability and risk analysis, and secure Microsoft Azure engineering. The engineer develops and improves security processes, conducts hands-on testing, supports alert triage and response, and designs and implements secure cloud solutions aligned with the cybersecurity strategy and federal requirements including NIST, FISMA, FedRAMP, and Zero Trust principles.** This Role is Contingent Upon Award**Responsibilities:Develop, enhance, and maintain Security Operations Center (SOC) SOPs and security assessment operations processes.Protect the integrity, confidentiality, and accountability of operational security processes and data.Perform vulnerability analysis and review system requirements, architectures, design documents, test plans, and security plans; provide senior technical recommendations.Develop security evaluation plans, test procedures, and assessment methodologies; conduct hands-on security testing and analyze results.Assess and calculate risk based on threats, vulnerabilities, security-control weaknesses, and testing results; document mitigation strategies and countermeasures.Support the design, development, and implementation of security-related systems, tools, and assessment capabilities.Lead or participate in technical exchange meetings, document outcomes and action items, and brief leadership on security engineering status and results.Support SOC alert analysis, triage, escalation, containment actions, and continuous improvement of detection and response use cases.Lead engineering and implementation of secure Microsoft Azure solutions aligned with NIST, FISMA, FedRAMP, and NTIA cybersecurity requirements.Implement Zero Trust controls across Azure, including identity hardening, micro-segmentation, Conditional Access, continuous monitoring, RBAC/least privilege, and governance.Configure and secure Azure services and controls including AKS, Azure Policy, secure Landing Zones, Azure AD/Entra, Conditional Access, RBAC, resource tagging, naming standards, and governance controls.Other duties as assigned.QualificationsYears of Experience: Minimum 8 years of cybersecurity experience.Education Level: Bachelor’s degree (BS/BA) in Information Technology, Computer Science, Cybersecurity, or a related technical field.Clearance Requirements: Secret clearance or higher.Certification Requirements: Security+ or CISSP CISSP or equivalent recognized cybersecurity certification AND a Cloud Architecture/Engineer or similar certification. Network/security engineering or other relevant industry certifications are also desirable. See Certification examples below:Any other work-related qualifications needed for the role: Demonstrated experience securing Azure services including AKS, Azure Policy, Azure AD/Entra, Conditional Access, RBAC, secure Landing Zones, and Zero Trust controls. Ability to evaluate security documentation, build security test plans and evaluation methodologies, coordinate across cybersecurity teams, and communicate technical issues to leadership.Salary Range: $102,000 to $132,000The compensation range listed for this position represents the good faith salary range Diné Development Corporation (DDC) and its subsidiaries reasonably expect to pay for the role, in accordance with applicable state and local pay transparency laws. Actual compensation will be determined based on a variety of factors, including the position's responsibilities, the candidate's education, experience, skills, internal equity, market considerations, and any applicable collective bargaining agreements or legal requirements.About UsDiné Development Corporation (DDC) is a Navajo Nation–owned family of companies that provides government agencies and commercial organizations with high-quality IT, professional, environmental, and research and development services. DDC is dedicated to empowering the Navajo Nation and the communities we serve.BenefitsEligible full-time employees receive a comprehensive benefits package, including medical, dental, vision, life and disability coverage, retirement savings with company match, and paid time off. Additional benefits include voluntary supplemental benefits, access to an employee assistance program, and educational assistance with tuition reimbursement.Equal Opportunity & Compliance StatementThis contractor and subcontractor shall abide by the requirements of 41 CFR 60-1.4(a), 60-300.5(a), and 60-741.5(a). These regulations prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities, and prohibit discrimination against all individuals based on their race, color, religion, sex, sexual orientation, gender identity, national origin, or for inquiring about, discussing, or disclosing information about compensation, or any other basis prohibited by law.We participate in E-Verify.DDC is committed to providing equal employment opportunities to all applicants and employees. If you require a reasonable accommodation to participate in the application or interview process, please contact Recruiting for assistance [e-mail]