Intermediate Cybersecurity Analyst

Diné Development Corporation•Quantico, VA

About The Position

Provides intermediate-level cybersecurity and information assurance support for the US Air Force Office of Special Investigations (AFOSI). Under the direction of experienced cybersecurity personnel, the analyst assists with Risk Management Framework (RMF) Assessment and Authorization packages, security control implementation and monitoring, vulnerability management, compliance documentation, and security reporting. The role supports AFOSI cybersecurity operations by helping maintain system security documentation and coordinating with infrastructure, operations, and development teams to address Department of Defense security requirements. The analyst also provides technical engineering and implementation support for security solutions, including vulnerability-scanning architecture, SIEM solutions, security testing in development pipelines, secure configuration baselines, and security architecture documentation. The position supports readiness assessments and incident-response activities as assigned. The role requires an active Top Secret clearance with SCI eligibility, an approved DoD 8570/8140 IAT Level II certification or the ability to obtain it within the timeframe permitted by the contract, and U.S. citizenship. An associate’s or bachelor’s degree in a related field is preferred; equivalent technical training and relevant experience are considered. Salary range: $115,000 to $146,000. Diné Development Corporation (DDC) is a Navajo Nation–owned family of companies providing IT, professional, environmental, and research and development services.

Requirements

Five years of experience in cybersecurity and information assurance, including at least three years of systems administration experience supporting servers and infrastructure.
Active Top Secret clearance and SCI eligibility.
An approved DoD 8570/8140 IAT Level II certification, or ability to obtain the required certification within the timeframe permitted by the contract.
Foundational knowledge of RMF, STIGs, security controls, vulnerability management, POA&M tracking, event-log review, firewalls, and security risk assessments.
U.S. citizenship.
Attention to detail, analytical problem-solving skills, effective oral and written communication, and the ability to learn DoD cybersecurity processes and tools.

Nice To Haves

Associate’s or bachelor’s degree in cybersecurity, information technology, computer science, or a related field; equivalent technical training and relevant experience are considered.
Familiarity with eMASS, GRC applications, ACAS/Tenable, HBSS, Splunk, ArcSight, Active Directory, PowerShell, and asset-management tools.

Responsibilities

Provide technical engineering and implementation support for security solutions, including vulnerability-scanning architecture, SIEM engineering, security testing integration into development pipelines, secure configuration baselines, and security architecture documentation.
Assist with building, coordinating, maintaining, and updating RMF Assessment and Authorization packages and supporting security documentation for AFOSI systems and enclaves.
Assist with implementing and monitoring security controls, documenting findings, and tracking remediation activities through the Plan of Action and Milestones process.
Support vulnerability scanning, report review, asset-list maintenance, scan scheduling, and identification of configuration issues and missing patches using ACAS or comparable tools.
Correlate vulnerability results with IAVM alerts, bulletins, and Common Vulnerabilities and Exposures to support compliance tracking.
Support reviews of system and application configurations against applicable DISA Security Technical Implementation Guides and Security Requirements Guidance.
Assist with maintaining Governance, Risk and Compliance records and eMASS artifacts, including policies, plans, procedures, reports, and authorization documentation.
Assist with security-log review and reporting using SIEM tools such as Splunk or ArcSight, and use basic PowerShell scripts to collect and organize security data.
Collaborate with cybersecurity, infrastructure, operations, and development personnel; communicate findings clearly; and support readiness assessments and incident-response activities as assigned.