Cybersecurity Cloud Analyst

Diné Development Corporation

About The Position

Assesses and strengthens the security of cloud-hosted systems, analyzes cloud threats, and supports protection, detection, monitoring, response, and reporting aligned to DoD needs. This position is contingent upon contract award.

Requirements

Three (3) years of cybersecurity experience
Three (3) years of cloud IT administration or cybersecurity experience
IT-I Critical Sensitive / Tier 5 (T5) clearance, required at proposal submission
Understanding of NIST Cybersecurity Framework and MITRE ATT&CK
Understanding of basic network concepts
Experience with PaaS, IaaS, and SaaS deployments

Nice To Haves

Experience securing AWS GovCloud or other regulated cloud environments.
Experience supporting DoD Impact Level 5 systems.
Experience implementing zero-trust architecture and role-based access control.
Experience with CAC authentication, PKI authentication, and encryption at rest.
Experience supporting ATO packages and the DoD Risk Management Framework.
Experience interpreting and implementing Security Technical Implementation Guides.
Experience using ACAS or comparable vulnerability-scanning tools and remediating findings.
Experience developing, managing, or closing Plans of Action and Milestones.
Experience with Web Application Firewalls, reverse web proxies, security monitoring, and cloud incident response.
Experience evaluating the security of AI/ML models, pipelines, data, and cloud-hosted applications.
Experience with threat detection, insider-threat analysis, fraud detection, or cloud threat intelligence.
Experience developing security architecture, system security designs, assessment documentation, and compliance guides.
Experience supporting audit logging, audit trails, traceability, and cybersecurity evidence collection.
Current DoD 8570/8140 baseline and computing-environment certifications appropriate to assigned duties are preferred.

Responsibilities

Review cloud architecture, design, and security policy for DoD compliance
Recommend security-posture improvements
Analyze and report cloud-based threats and attacks
Coordinate with cyber intelligence and incident-response analysts
Identify protection and detection gaps with content developers and cybersecurity engineers
Maintain awareness of current cloud threats and deliver actionable reports and briefings