Cyber Security SME

Diné Development Corporation•Washington, DC

About The Position

The Cyber Security Engineer provides senior cybersecurity engineering, assessment, risk, policy, and security-testing expertise to protect government systems, data, and networks and maintain compliance with NIST, FISMA, National Security System (NSS), and related federal cybersecurity requirements. The position supports security evaluation, vulnerability analysis, risk determination, remediation recommendations, technical exchanges, and leadership briefings across classified and unclassified environments. This Position is Contingent Upon Award.

Requirements

Minimum 8 years of cybersecurity experience.
Master’s degree (MS/MA) in Information Technology, Cybersecurity, Computer Science, Business Management, or a related field.
Secret clearance or higher.
CISSP or similar recognized cybersecurity certification.
Strong working knowledge of RMF, FISMA, security control assessment, vulnerability management, SSP/ATO artifacts, risk analysis, security testing, and federal cybersecurity policy.
Must communicate technical findings clearly to both technical stakeholders and leadership and be able to work across government/contractor teams.

Responsibilities

Provide enhancement capabilities and standard operating procedures (SOPs) for cybersecurity assessment operations and implementation.
Maintain the integrity and confidentiality of security assessment processes and analyze system and application vulnerabilities.
Review and provide recommendations on requirements specifications, system architectures, design documents, test plans, security plans, and other program-level cybersecurity documentation.
Develop and document security evaluation test plans, procedures, and assessment methodologies.
Research, evaluate, and help develop information security policies, procedures, guidance, and governance artifacts.
Conduct hands-on security testing; analyze results; document risk; identify threats, vulnerabilities, and shortfalls; and recommend mitigating countermeasures.
Coordinate security testing activities with ISSOs, system owners, architecture teams, engineering teams, and other cybersecurity stakeholders.
Participate in or lead technical exchange meetings, document action items and results, and brief leadership on cybersecurity activities and findings.
Provide oversight and technical guidance for the design, development, and implementation of security-related support systems and capabilities.
Support IA engineering, risk and vulnerability assessments, continuous monitoring, ATO/RMF documentation, remediation planning, and incorporation of security requirements into system design and configuration baselines.
Other duties as assigned.