Assesses and strengthens the security of cloud-hosted systems, analyzes cloud threats, and supports protection, detection, monitoring, response, and reporting aligned to DoD needs.
*This position is contingent upon contract award.*
Responsibilities:
- Review cloud architecture, design, and security policy for DoD compliance
- Recommend security-posture improvements
- Analyze and report cloud-based threats and attacks
- Coordinate with cyber intelligence and incident-response analysts
- Identify protection and detection gaps with content developers and cybersecurity engineers
- Maintain awareness of current cloud threats and deliver actionable reports and briefings
Qualifications:
- Years of Experience: Three (3) years of cybersecurity experience; Three (3) years of cloud IT administration or cybersecurity experience
- Clearance Requirements: IT-I Critical Sensitive / Tier 5 (T5), required at proposal submission
- Certification Requirements:
- Required for assigned cybersecurity/IA duties before starting work; exact baseline and computing-environment certifications are duty-based and not specified in the role description.
- Any other work-related qualifications needed for the role:
- Understanding of NIST Cybersecurity Framework and MITRE ATT&CK
- Understanding of basic network concepts
- Experience with PaaS, IaaS, and SaaS deployments
Desired/Preferred:
- Experience securing AWS GovCloud or other regulated cloud environments.
- Experience supporting DoD Impact Level 5 systems.
- Experience implementing zero-trust architecture and role-based access control.
- Experience with CAC authentication, PKI authentication, and encryption at rest.
- Experience supporting ATO packages and the DoD Risk Management Framework.
- Experience interpreting and implementing Security Technical Implementation Guides.
- Experience using ACAS or comparable vulnerability-scanning tools and remediating findings.
- Experience developing, managing, or closing Plans of Action and Milestones.
- Experience with Web Application Firewalls, reverse web proxies, security monitoring, and cloud incident response.
- Experience evaluating the security of AI/ML models, pipelines, data, and cloud-hosted applications.
- Experience with threat detection, insider-threat analysis, fraud detection, or cloud threat intelligence.
- Experience developing security architecture, system security designs, assessment documentation, and compliance guides.
- Experience supporting audit logging, audit trails, traceability, and cybersecurity evidence collection.
- Current DoD 8570/8140 baseline and computing-environment certifications appropriate to assigned duties are preferred.
About Us
Diné Development Corporation (DDC) is a Navajo Nation–owned family of companies that provides government agencies and commercial organizations with high-quality IT, professional, environmental, and research and development services. DDC is dedicated to empowering the Navajo Nation and the communities we serve.
Benefits
Eligible full-time employees receive a comprehensive benefits package, including medical, dental, vision, life and disability coverage, retirement savings with company match, and paid time off. Additional benefits include voluntary supplemental benefits, access to an employee assistance program, and educational assistance with tuition reimbursement.
Equal Opportunity & Compliance Statement
This contractor and subcontractor shall abide by the requirements of 41 CFR 60-1.4(a), 60-300.5(a), and 60-741.5(a). These regulations prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities, and prohibit discrimination against all individuals based on their race, color, religion, sex, sexual orientation, gender identity, national origin, or for inquiring about, discussing, or disclosing information about compensation, or any other basis prohibited by law.
We participate in E-Verify.
DDC is committed to providing equal employment opportunities to all applicants and employees. If you require a reasonable accommodation to participate in the application or interview process, please contact Recruiting for assistance [email protected]
Skills Required
- Three (3) years of cybersecurity experience
- Three (3) years of cloud IT administration or cybersecurity experience
- IT-I Critical Sensitive / Tier 5 (T5) clearance required at proposal submission
- Required cybersecurity/IA certifications for assigned duties before starting work (baseline duty-based)
- Understanding of NIST Cybersecurity Framework
- Understanding of MITRE ATT&CK
- Understanding of basic network concepts
- Experience with PaaS, IaaS, and SaaS deployments
- Experience securing AWS GovCloud or other regulated cloud environments
- Experience supporting DoD Impact Level 5 systems
- Experience implementing zero-trust architecture and role-based access control
- Experience with CAC authentication, PKI authentication, and encryption at rest
- Experience supporting ATO packages and the DoD Risk Management Framework
- Experience interpreting and implementing Security Technical Implementation Guides (STIGs)
- Experience using ACAS or comparable vulnerability-scanning tools and remediating findings
- Experience developing, managing, or closing Plans of Action and Milestones (POA&M)
- Experience with Web Application Firewalls, reverse web proxies, security monitoring, and cloud incident response
- Experience evaluating security of AI/ML models, pipelines, data, and cloud-hosted applications
- Experience with threat detection, insider-threat analysis, fraud detection, or cloud threat intelligence
- Experience developing security architecture, system security designs, assessment documentation, and compliance guides
- Experience supporting audit logging, audit trails, traceability, and cybersecurity evidence collection
- Current DoD 8570/8140 baseline and computing-environment certifications appropriate to assigned duties
What We Do
Diné Development Corporation (DDC) is a family of subsidiaries that delivers IT, professional, and environmental services to solve the dynamic challenges of government agencies and commercial firms. Inspired by our Navajo legacy, we lead with quality and ingenuity to advance our clients’ missions. We deliver exceptional solutions while creating sustainable prosperity for the Navajo Nation and communities across the world.
