Qureos Mentor

Digital Global Connectors

<div>Zero Trust Architect 
Location: Bethesda, MD (Hybrid; On-site as Required)

Clearance: Tier 2 Public Trust (Required)

Employment Type: Full-Time 

Position Summary

Digital Global Connectors (DGC) is seeking an experienced Zero Trust Architect to support a Federal information security program. The Zero Trust Architect is responsible for designing, implementing, and maturing enterprise Zero Trust Architecture (ZTA) strategies that strengthen organizational cybersecurity through identity-centric, risk-based security principles.

This position provides technical leadership for Zero Trust initiatives across identity, devices, networks, applications, workloads, data, automation, and visibility. The Zero Trust Architect collaborates with Security Architects, Cloud Engineers, Security Engineers, ISSOs, Network Engineers, System Owners, and program leadership to integrate Zero Trust principles into enterprise technology modernization efforts.

The successful candidate will possess extensive experience implementing Zero Trust concepts, cloud security architectures, identity governance, and modern cybersecurity technologies that align with Federal cybersecurity guidance and industry best practices. 
Essential Duties and Responsibilities: 
Zero Trust Strategy
<ul>
<li>Develop and maintain enterprise Zero Trust Architecture roadmaps.</li>
<li>Design security architectures based on Zero Trust principles.</li>
<li>Assess existing environments and identify opportunities to improve Zero Trust maturity.</li>
<li>Recommend phased implementation strategies that minimize operational disruption.</li>
<li>Align Zero Trust initiatives with organizational business and mission objectives.</li>
<li>Support long-term cybersecurity modernization efforts.</li>
</ul>
Enterprise Architecture
<ul>
<li>Design secure enterprise architectures that integrate identity, devices, networks, applications, and data protection.</li>
<li>Develop reference architectures and technical standards supporting Zero Trust implementation.</li>
<li>Review proposed technologies for architectural alignment.</li>
<li>Identify architectural risks and recommend mitigation strategies.</li>
<li>Support secure integration across cloud, hybrid, and on-premises environments.</li>
<li>Ensure security is incorporated throughout the system development lifecycle.</li>
</ul>
Identity and Access Management
<ul>
<li>Design enterprise Identity and Access Management (IAM) architectures.</li>
<li>Implement least-privilege and just-in-time access models.</li>
<li>Support deployment of Multi-Factor Authentication (MFA), Conditional Access, Privileged Identity Management (PIM), and Privileged Access Management (PAM).</li>
<li>Develop identity governance strategies.</li>
<li>Support continuous identity verification and adaptive access controls.</li>
<li>Recommend improvements to authentication and authorization processes.</li>
</ul>
Network and Micro-Segmentation
<ul>
<li>Design secure network segmentation strategies.</li>
<li>Implement policy-based access controls.</li>
<li>Recommend micro-segmentation solutions that limit lateral movement.</li>
<li>Evaluate secure remote access technologies.</li>
<li>Support software-defined perimeter (SDP) and Zero Trust Network Access (ZTNA) initiatives.</li>
<li>Review network architectures for Zero Trust compliance.</li>
</ul>
Cloud and Data Security
<ul>
<li>Design secure cloud architectures supporting Microsoft Azure, Microsoft 365, Amazon Web Services (AWS), and hybrid environments.</li>
<li>Implement cloud-native Zero Trust capabilities.</li>
<li>Develop data protection strategies utilizing encryption, data classification, and data loss prevention (DLP).</li>
<li>Recommend secure workload protection mechanisms.</li>
<li>Evaluate cloud security posture and identify opportunities for improvement.</li>
<li>Support secure cloud modernization initiatives.</li>
</ul>
Security Technologies

Design and integrate enterprise security technologies including:
<ul>
<li>Microsoft Entra ID</li>
<li>Microsoft Defender XDR</li>
<li>Microsoft Defender for Cloud</li>
<li>Microsoft Sentinel</li>
<li>Microsoft Intune</li>
<li>Azure Policy</li>
<li>Microsoft Purview</li>
<li>Conditional Access</li>
<li>Privileged Identity Management (PIM)</li>
<li>Privileged Access Management (PAM)</li>
<li>Security Information and Event Management (SIEM)</li>
<li>Endpoint Detection and Response (EDR)</li>
<li>Extended Detection and Response (XDR)</li>
<li>Zero Trust Network Access (ZTNA)</li>
</ul>
Evaluate new technologies supporting Zero Trust maturity.

Risk Management Framework (RMF) Support
<ul>
<li>Support implementation of NIST SP 800-53 security controls.</li>
<li>Review system architectures supporting Authorization to Operate (ATO) activities.</li>
<li>Assist ISSOs and Security Assessors during architecture reviews.</li>
<li>Recommend technical solutions supporting continuous monitoring.</li>
<li>Evaluate architectural risks identified during security assessments.</li>
<li>Support development of architecture documentation associated with RMF activities.</li>
</ul>
Documentation and Reporting

Develop and maintain:
<ul>
<li>Zero Trust Roadmaps</li>
<li>Enterprise Security Architectures</li>
<li>Reference Architectures</li>
<li>Technical Design Documents</li>
<li>Security Architecture Diagrams</li>
<li>Technology Standards</li>
<li>Implementation Guides</li>
<li>Executive Briefings</li>
<li>Maturity Assessments</li>
<li>Architecture Decision Records (ADRs)</li>
</ul>
Ensure documentation remains current, technically accurate, and aligned with organizational standards.

Collaboration
<ul>
<li>Coordinate with Security Architects, Security Engineers, Cloud Engineers, ISSOs, Network Engineers, System Owners, Enterprise Architects, Project Managers, and Government stakeholders.</li>
<li>Participate in architecture review boards and technical working groups.</li>
<li>Provide technical leadership during modernization initiatives.</li>
<li>Present Zero Trust strategies and recommendations to technical and executive leadership.</li>
<li>Mentor engineering teams on Zero Trust implementation principles.</li>
</ul>
Continuous Improvement
<ul>
<li>Monitor emerging Zero Trust technologies, Federal cybersecurity guidance, and industry best practices.</li>
<li>Recommend improvements to enterprise architecture and security engineering processes.</li>
<li>Support automation initiatives that improve security operations and policy enforcement.</li>
<li>Evaluate evolving Zero Trust capabilities and implementation approaches.</li>
<li>Maintain professional certifications and advanced technical expertise.</li></ul> 


Minimum Qualifications
<ul>
<li>Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Systems, Engineering, or a related discipline.</li>
<li>Minimum eight (8) years of experience designing enterprise cybersecurity architectures.</li>
<li>Minimum three (3) years of experience designing or implementing Zero Trust Architecture initiatives.</li>
<li>Experience implementing Identity and Access Management (IAM), cloud security, and enterprise security architecture.</li>
<li>Experience supporting the NIST Risk Management Framework (RMF) and NIST SP 800-53 security controls.</li>
<li>Strong analytical, documentation, presentation, and communication skills.</li>
<li>U.S. Citizenship required.</li>
<li>Ability to obtain and maintain a Tier 2 Public Trust.</li></ul> 


Preferred Qualifications
<ul>
<li>Master's degree in Cybersecurity, Computer Science, Information Assurance, Engineering, or a related discipline.</li>
<li>Experience supporting a Federal civilian agency.</li>
<li>Experience implementing Microsoft security technologies within enterprise environments.</li>
<li>Experience designing cloud security architectures for Microsoft Azure and AWS.</li>
<li>Certified Information Systems Security Professional (CISSP)</li>
<li>Certified Cloud Security Professional (CCSP)</li>
<li>Microsoft Certified: Cybersecurity Architect Expert (SC-100)</li>
<li>Microsoft Certified: Azure Security Engineer Associate (AZ-500)</li>
<li>TOGAF Certification (preferred)</li>
<li>SABSA Chartered Security Architect (preferred)</li></ul> 


Knowledge, Skills, and Abilities
<ul>
<li>Zero Trust Architecture (ZTA)</li>
<li>Identity and Access Management (IAM)</li>
<li>Microsoft Entra ID</li>
<li>Conditional Access</li>
<li>Multi-Factor Authentication (MFA)</li>
<li>Privileged Identity Management (PIM)</li>
<li>Privileged Access Management (PAM)</li>
<li>Zero Trust Network Access (ZTNA)</li>
<li>Micro-Segmentation</li>
<li>Microsoft Defender XDR</li>
<li>Microsoft Defender for Cloud</li>
<li>Microsoft Sentinel</li>
<li>Microsoft Intune</li>
<li>Microsoft Purview</li>
<li>Microsoft Azure</li>
<li>Microsoft 365 Security</li>
<li>Amazon Web Services (AWS)</li>
<li>Security Information and Event Management (SIEM)</li>
<li>Endpoint Detection and Response (EDR)</li>
<li>Extended Detection and Response (XDR)</li>
<li>NIST Risk Management Framework (RMF)</li>
<li>NIST SP 800-53</li>
<li>NIST SP 800-207</li>
<li>CISA Zero Trust Maturity Model</li>
<li>Federal Information Security Modernization Act (FISMA)</li>
<li>Enterprise Security Architecture</li>
<li>Technical Documentation</li>
<li>Microsoft Office Suite</li>
<li>Microsoft Visio</li>
<li>ServiceNow</li>
<li>Jira</li>
<li>
</li></ul>Security Requirements
<ul>
<li>Ability to successfully obtain and maintain a Tier 2 Public Trust investigation.</li>
<li>Compliance with all applicable Federal security, privacy, ethics, and information assurance training requirements before receiving system access.</li>
<li>Ability to support enterprise cybersecurity modernization initiatives, architecture reviews, continuity of operations (COOP), emergency response activities, and surge support as required.</li>
<li>Must maintain strict confidentiality while handling enterprise architecture documentation, security designs, implementation roadmaps, and Federal information systems.</li>
<li>Ability to design and implement enterprise Zero Trust Architecture while collaborating with Government stakeholders, technical teams, and program leadership to improve cyber resilience, reduce organizational risk, and strengthen the security of enterprise information systems through modern, identity-centric security principles.</li></ul></div>

Zero Trust Architect

<div>Vulnerability Management Engineer 
Location: Bethesda, MD (Hybrid; On-site as Required)

Clearance: Tier 2 Public Trust (Required)

Employment Type: Full-Time 
Position Summary 
Digital Global Connectors (DGC) is seeking an experienced Vulnerability Management Engineer to support a Federal information security program. The Vulnerability Management Engineer is responsible for identifying, assessing, prioritizing, tracking, and supporting the remediation of security vulnerabilities across enterprise information systems, cloud environments, applications, databases, network infrastructure, and endpoint devices.

This position performs enterprise vulnerability assessments, validates remediation efforts, supports continuous monitoring activities, and works closely with Security Engineers, ISSOs, System Administrators, Cloud Engineers, Security Operations Center (SOC) personnel, and program leadership to reduce organizational cyber risk and strengthen the overall cybersecurity posture.

The successful candidate will possess extensive experience administering enterprise vulnerability management platforms, performing technical vulnerability assessments, and implementing risk-based remediation strategies within large enterprise environments. 
Essential Duties and Responsibilities: 
Enterprise Vulnerability Assessments
<ul>
<li>Conduct enterprise vulnerability assessments across servers, workstations, databases, network infrastructure, cloud environments, applications, and endpoint devices.</li>
<li>Perform authenticated and unauthenticated vulnerability scans.</li>
<li>Analyze vulnerability assessment results to determine severity and organizational impact.</li>
<li>Validate scan accuracy and eliminate false positives.</li>
<li>Identify systemic security weaknesses and recurring vulnerabilities.</li>
<li>Maintain vulnerability assessment schedules supporting continuous monitoring activities.</li>
</ul>
Vulnerability Management
<ul>
<li>Prioritize vulnerabilities using risk-based methodologies.</li>
<li>Coordinate remediation activities with System Administrators, Cloud Engineers, Security Engineers, and System Owners.</li>
<li>Track remediation progress through completion.</li>
<li>Validate successful remediation of identified vulnerabilities.</li>
<li>Recommend mitigation strategies when immediate remediation is not feasible.</li>
<li>Monitor aging vulnerabilities and escalation thresholds.</li>
</ul>
Security Configuration Compliance
<ul>
<li>Assess compliance with DISA Security Technical Implementation Guides (STIGs), CIS Benchmarks, Microsoft Security Baselines, and organizational configuration standards.</li>
<li>Identify configuration weaknesses affecting system security.</li>
<li>Recommend secure configuration improvements.</li>
<li>Validate implementation of security hardening recommendations.</li>
<li>Support configuration compliance reporting.</li>
<li>Assist technical teams with remediation planning.</li>
</ul>
Vulnerability Assessment Tools

Administer and operate enterprise vulnerability management technologies including:
<ul>
<li>Tenable Security Center</li>
<li>Nessus Manager</li>
<li>Nessus Professional</li>
<li>Nessus Agents</li>
<li>Microsoft Defender Vulnerability Management</li>
<li>Qualys VMDR</li>
<li>Rapid7 InsightVM</li>
<li>Microsoft Defender for Cloud</li>
<li>AWS Inspector</li>
<li>Azure Security Center</li>
<li>Security Content Automation Protocol (SCAP) tools</li>
</ul>
Maintain vulnerability scanning infrastructure and ensure scanning activities are performed efficiently and accurately.

Cloud Vulnerability Management
<ul>
<li>Perform vulnerability assessments across Microsoft Azure, Microsoft 365, Amazon Web Services (AWS), and hybrid cloud environments.</li>
<li>Assess cloud resource configurations for security weaknesses.</li>
<li>Identify cloud misconfigurations and excessive permissions.</li>
<li>Validate cloud security posture following remediation.</li>
<li>Support cloud compliance initiatives.</li>
<li>Recommend improvements to cloud vulnerability management processes.</li>
</ul>
Risk Management Framework (RMF) Support
<ul>
<li>Support implementation of NIST SP 800-53 security controls related to vulnerability management.</li>
<li>Provide technical evidence supporting Authorization to Operate (ATO) activities.</li>
<li>Assist ISSOs and Security Assessors during Security Control Assessments (SCAs).</li>
<li>Validate remediation of technical findings identified during security assessments.</li>
<li>Support continuous monitoring reporting requirements.</li>
<li>Maintain documentation supporting RMF activities.</li>
</ul>
Reporting and Metrics

Develop and maintain:
<ul>
<li>Vulnerability Assessment Reports</li>
<li>Executive Vulnerability Dashboards</li>
<li>Remediation Status Reports</li>
<li>POA&amp;M Support Documentation</li>
<li>Vulnerability Trend Reports</li>
<li>Security Metrics</li>
<li>Compliance Reports</li>
<li>Continuous Monitoring Reports</li>
<li>Risk Assessments</li>
<li>Standard Operating Procedures</li>
</ul>
Ensure reporting accurately reflects enterprise vulnerability status and supports executive decision-making.

Collaboration
<ul>
<li>Coordinate with Security Engineers, ISSOs, System Administrators, Cloud Engineers, SOC Analysts, Threat Hunters, Security Assessors, and Government stakeholders.</li>
<li>Participate in vulnerability review meetings.</li>
<li>Provide technical guidance regarding vulnerability remediation priorities.</li>
<li>Support enterprise cybersecurity initiatives and security assessments.</li>
<li>Assist with troubleshooting vulnerability scanning issues.</li>
</ul>
Continuous Improvement
<ul>
<li>Monitor emerging vulnerabilities, Common Vulnerabilities and Exposures (CVEs), Common Weakness Enumerations (CWEs), and evolving attack techniques.</li>
<li>Evaluate new vulnerability management technologies.</li>
<li>Recommend improvements to enterprise vulnerability management processes.</li>
<li>Support automation initiatives that improve vulnerability detection and remediation.</li>
<li>Maintain professional certifications and technical expertise.</li></ul> 


Minimum Qualifications
<ul>
<li>Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Systems, Engineering, or a related discipline.</li>
<li>Minimum four (4) years of experience performing enterprise vulnerability management or vulnerability assessment activities.</li>
<li>Experience administering Tenable, Qualys, Rapid7, Microsoft Defender Vulnerability Management, or comparable enterprise vulnerability management platforms.</li>
<li>Experience supporting Windows, Linux, network, cloud, and hybrid environments.</li>
<li>Familiarity with NIST SP 800-53, the Risk Management Framework (RMF), and Federal cybersecurity requirements.</li>
<li>Strong analytical, troubleshooting, documentation, and communication skills.</li>
<li>U.S. Citizenship required.</li>
<li>Ability to obtain and maintain a Tier 2 Public Trust.</li></ul> 


Preferred Qualifications
<ul>
<li>Master's degree in Cybersecurity, Information Assurance, Computer Science, Engineering, or a related discipline.</li>
<li>Experience supporting a Federal civilian agency.</li>
<li>Experience supporting Microsoft Azure, Microsoft 365, or AWS cloud environments.</li>
<li>Experience implementing Security Content Automation Protocol (SCAP) compliance tools.</li>
<li>Tenable Certified Nessus Expert</li>
<li>CompTIA CySA+</li>
<li>CompTIA Security+</li>
<li>GIAC Continuous Monitoring Certification (GMON)</li>
<li>Certified Information Systems Security Professional (CISSP) (preferred)</li>
<li>Microsoft Certified: Azure Security Engineer Associate (AZ-500) (preferred)</li></ul> 


Knowledge, Skills, and Abilities
<ul>
<li>Vulnerability Management</li>
<li>Vulnerability Assessments</li>
<li>Risk-Based Vulnerability Prioritization</li>
<li>Tenable Security Center</li>
<li>Nessus</li>
<li>Microsoft Defender Vulnerability Management</li>
<li>Qualys VMDR</li>
<li>Rapid7 InsightVM</li>
<li>Microsoft Defender for Cloud</li>
<li>AWS Inspector</li>
<li>Azure Security Center</li>
<li>DISA STIGs</li>
<li>CIS Benchmarks</li>
<li>Security Configuration Compliance</li>
<li>Security Content Automation Protocol (SCAP)</li>
<li>Windows Security</li>
<li>Linux Security</li>
<li>Cloud Security</li>
<li>Microsoft Azure</li>
<li>Amazon Web Services (AWS)</li>
<li>Risk Management Framework (RMF)</li>
<li>NIST SP 800-53</li>
<li>Federal Information Security Modernization Act (FISMA)</li>
<li>Common Vulnerabilities and Exposures (CVEs)</li>
<li>Common Weakness Enumeration (CWE)</li>
<li>POA&amp;M Management</li>
<li>Technical Documentation</li>
<li>Microsoft Office Suite</li>
<li>ServiceNow</li>
<li>Jira</li></ul> 


Security Requirements
<ul>
<li>Ability to successfully obtain and maintain a Tier 2 Public Trust investigation.</li>
<li>Compliance with all applicable Federal security, privacy, ethics, and information assurance training requirements before receiving system access.</li>
<li>Ability to support enterprise vulnerability management operations, scheduled maintenance windows, continuity of operations (COOP), emergency response activities, and surge support as required.</li>
<li>Must maintain strict confidentiality while handling vulnerability assessment data, system configurations, compliance findings, remediation information, and Federal information systems.</li>
<li>Ability to identify, assess, prioritize, and support remediation of enterprise vulnerabilities while collaborating with Government stakeholders, technical teams, and program leadership to reduce organizational cyber risk and improve the security posture of enterprise information systems.</li></ul></div>

Vulnerability Management Engineer

<div>Security Architect 
Location: Bethesda, MD (Hybrid; On-site as Required)

Clearance: Tier 2 Public Trust (Required)

Employment Type: Full-Time 
Position Summary 
Digital Global Connectors (DGC) is seeking an experienced Security Architect to support a Federal information security program. The Security Architect is responsible for designing, developing, and maintaining secure enterprise architectures that protect information systems, cloud environments, applications, networks, and data while supporting organizational business and mission objectives.

This position provides strategic technical leadership for enterprise cybersecurity architecture, including security engineering, identity and access management, cloud security, Zero Trust implementation, network segmentation, security modernization, and systems integration. The Security Architect collaborates with Security Engineers, Cloud Engineers, ISSOs, System Owners, Network Engineers, Project Managers, and program leadership to ensure security is integrated throughout the system development lifecycle and enterprise technology initiatives.

The successful candidate will possess extensive experience developing enterprise security architectures, implementing modern cybersecurity technologies, and aligning technical solutions with Federal cybersecurity standards and best practices. 
Essential Duties and Responsibilities: 
Enterprise Security Architecture
<ul>
<li>Design and maintain enterprise cybersecurity architectures supporting information systems, applications, cloud services, and network infrastructure.</li>
<li>Develop architecture standards, reference architectures, and technical implementation guidance.</li>
<li>Ensure security principles are incorporated throughout the system development lifecycle.</li>
<li>Evaluate proposed technologies for alignment with enterprise security architecture.</li>
<li>Recommend architectural improvements that strengthen organizational cybersecurity posture.</li>
<li>Support long-term cybersecurity modernization initiatives.</li>
</ul>
Security Design and Engineering
<ul>
<li>Develop secure technical designs for enterprise systems and infrastructure.</li>
<li>Review proposed system architectures for security compliance.</li>
<li>Identify architectural risks and recommend mitigation strategies.</li>
<li>Define secure engineering standards and configuration baselines.</li>
<li>Support secure integration of enterprise technologies.</li>
<li>Review technical implementation plans to ensure security requirements are incorporated.</li>
</ul>
Zero Trust Architecture
<ul>
<li>Design enterprise Zero Trust Architecture (ZTA) solutions.</li>
<li>Implement identity-centric security principles across enterprise environments.</li>
<li>Develop secure access strategies using least privilege and continuous verification.</li>
<li>Recommend micro-segmentation and policy-based access controls.</li>
<li>Support implementation of Zero Trust technologies across cloud and hybrid environments.</li>
<li>Align architectural recommendations with NIST SP 800-207 and CISA Zero Trust guidance.</li>
</ul>
Cloud Security Architecture
<ul>
<li>Design secure cloud architectures supporting Microsoft Azure, Microsoft 365, Amazon Web Services (AWS), and hybrid cloud environments.</li>
<li>Evaluate cloud services for security risks and compliance.</li>
<li>Develop cloud security reference architectures and implementation guidance.</li>
<li>Support secure cloud migration initiatives.</li>
<li>Recommend cloud-native security technologies and automation capabilities.</li>
<li>Review cloud deployments to ensure compliance with organizational security requirements.</li>
</ul>
Identity and Access Management
<ul>
<li>Design enterprise Identity and Access Management (IAM) architectures.</li>
<li>Develop authentication, authorization, and identity governance strategies.</li>
<li>Support implementation of Multi-Factor Authentication (MFA), Conditional Access, Privileged Access Management (PAM), and Privileged Identity Management (PIM).</li>
<li>Recommend secure identity lifecycle management processes.</li>
<li>Evaluate identity technologies supporting enterprise modernization.</li>
</ul>
Risk Management Framework (RMF) Support
<ul>
<li>Support implementation of NIST SP 800-53 security controls.</li>
<li>Review system architectures supporting Authorization to Operate (ATO) activities.</li>
<li>Assist ISSOs and Security Assessors during architecture reviews.</li>
<li>Recommend technical solutions supporting continuous monitoring.</li>
<li>Evaluate architectural risks identified during security assessments.</li>
<li>Support development of security documentation associated with system authorization.</li>
</ul>
Technology Evaluation
<ul>
<li>Evaluate emerging cybersecurity technologies and architectural solutions.</li>
<li>Conduct technical assessments and proof-of-concept evaluations.</li>
<li>Develop technology recommendations supporting organizational objectives.</li>
<li>Assess vendor solutions for security capability, scalability, and interoperability.</li>
<li>Recommend technology investments based on risk and operational value.</li>
<li>Support acquisition planning and technical evaluations.</li>
</ul>
Documentation Development

Develop and maintain:
<ul>
<li>Enterprise Security Architectures</li>
<li>Reference Architectures</li>
<li>Technical Design Documents</li>
<li>Security Architecture Diagrams</li>
<li>Technology Standards</li>
<li>Security Engineering Standards</li>
<li>Architecture Decision Records (ADRs)</li>
<li>Security Implementation Guides</li>
<li>Executive Briefings</li>
<li>Technical Roadmaps</li>
</ul>
Ensure documentation remains technically accurate, current, and aligned with organizational standards.

Collaboration
<ul>
<li>Collaborate with Security Engineers, Cloud Engineers, Network Engineers, ISSOs, System Owners, Project Managers, Enterprise Architects, and Government stakeholders.</li>
<li>Participate in architecture review boards and technical working groups.</li>
<li>Provide technical leadership during enterprise modernization initiatives.</li>
<li>Present architecture recommendations to technical and executive leadership.</li>
<li>Mentor engineering teams on secure architecture principles.</li>
</ul>
Continuous Improvement
<ul>
<li>Monitor emerging cybersecurity technologies, Federal security guidance, and industry best practices.</li>
<li>Recommend improvements to enterprise security architecture and engineering processes.</li>
<li>Support automation initiatives improving security management and operations.</li>
<li>Promote adoption of secure-by-design principles across technology initiatives.</li>
<li>Maintain professional certifications and advanced technical expertise.</li></ul> 


Minimum Qualifications
<ul>
<li>Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Systems, Engineering, or a related discipline.</li>
<li>Minimum eight (8) years of experience designing enterprise cybersecurity architectures.</li>
<li>Experience developing secure architectures supporting cloud, hybrid, network, and enterprise environments.</li>
<li>Experience implementing Identity and Access Management (IAM), cloud security, and Zero Trust principles.</li>
<li>Experience supporting the Risk Management Framework (RMF) and NIST SP 800-53 security controls.</li>
<li>Strong analytical, documentation, presentation, and communication skills.</li>
<li>U.S. Citizenship required.</li>
<li>Ability to obtain and maintain a Tier 2 Public Trust.</li></ul> 


Preferred Qualifications
<ul>
<li>Master's degree in Cybersecurity, Computer Science, Information Assurance, Engineering, or a related discipline.</li>
<li>Experience supporting a Federal civilian agency.</li>
<li>Experience designing enterprise cloud security architectures.</li>
<li>Experience implementing Zero Trust Architecture.</li>
<li>Certified Information Systems Security Professional (CISSP)</li>
<li>Certified Cloud Security Professional (CCSP)</li>
<li>Microsoft Certified: Cybersecurity Architect Expert (SC-100)</li>
<li>Microsoft Certified: Azure Security Engineer Associate (AZ-500)</li>
<li>TOGAF Certification (preferred)</li>
<li>SABSA Chartered Security Architect (preferred)</li></ul> 


Knowledge, Skills, and Abilities
<ul>
<li>Enterprise Security Architecture</li>
<li>Security Engineering</li>
<li>Cloud Security Architecture</li>
<li>Zero Trust Architecture</li>
<li>Identity and Access Management (IAM)</li>
<li>Microsoft Entra ID</li>
<li>Microsoft Azure</li>
<li>Amazon Web Services (AWS)</li>
<li>Microsoft Defender XDR</li>
<li>Microsoft Defender for Cloud</li>
<li>Microsoft Sentinel</li>
<li>Microsoft Intune</li>
<li>Conditional Access</li>
<li>Privileged Access Management (PAM)</li>
<li>Privileged Identity Management (PIM)</li>
<li>Security Information and Event Management (SIEM)</li>
<li>Endpoint Detection and Response (EDR)</li>
<li>Extended Detection and Response (XDR)</li>
<li>NIST Risk Management Framework (RMF)</li>
<li>NIST SP 800-53</li>
<li>NIST SP 800-207</li>
<li>CISA Zero Trust Maturity Model</li>
<li>Federal Information Security Modernization Act (FISMA)</li>
<li>Enterprise Architecture</li>
<li>Technical Documentation</li>
<li>Microsoft Office Suite</li>
<li>Microsoft Visio</li>
<li>ServiceNow</li>
<li>Jira</li></ul> 


Security Requirements
<ul>
<li>Ability to successfully obtain and maintain a Tier 2 Public Trust investigation.</li>
<li>Compliance with all applicable Federal security, privacy, ethics, and information assurance training requirements before receiving system access.</li>
<li>Ability to support enterprise cybersecurity modernization initiatives, architecture reviews, scheduled maintenance windows, continuity of operations (COOP), emergency response activities, and surge support as required.</li>
<li>Must maintain strict confidentiality while handling enterprise architecture documentation, security designs, technical standards, and Federal information systems.</li>
<li>Ability to design scalable, secure, and resilient enterprise security architectures while collaborating with Government stakeholders, technical teams, and program leadership to integrate cybersecurity throughout the technology lifecycle and strengthen the organization's overall security posture.</li></ul></div>

Security Architect

<div>Cybersecurity Analyst, Incident Responder 
Location: Bethesda, MD (Hybrid; On-site as Required)

Clearance: Tier 2 Public Trust (Required)

Employment Type: Full-Time 
Position Summary 
Digital Global Connectors (DGC) is seeking an experienced Cybersecurity Analyst &ndash; Tier 2 (Incident Responder) to support a Federal information security program. The Tier 2 Incident Responder is responsible for investigating, containing, eradicating, and recovering from cybersecurity incidents affecting enterprise information systems, networks, cloud environments, and critical business operations.

This position performs advanced analysis of cybersecurity events, coordinates incident response activities, conducts forensic triage, analyzes malware and attacker tactics, and collaborates with Security Operations Center (SOC) personnel, Security Engineers, Threat Hunters, ISSOs, and System Owners to minimize operational impact and strengthen the organization's cybersecurity posture.

The successful candidate will possess strong technical investigative skills, experience responding to sophisticated cyber threats, and the ability to perform effective incident analysis within complex enterprise environments. 
Essential Duties and Responsibilities: 
Incident Response
<ul>
<li>Investigate cybersecurity incidents affecting enterprise information systems, applications, cloud services, and networks.</li>
<li>Perform incident triage to determine scope, severity, and operational impact.</li>
<li>Execute containment, eradication, and recovery procedures in accordance with established incident response plans.</li>
<li>Coordinate response activities with technical teams and program leadership.</li>
<li>Validate successful remediation before incident closure.</li>
<li>Maintain incident timelines and documentation throughout the response lifecycle.</li>
</ul>
Security Investigation
<ul>
<li>Analyze suspicious network traffic, endpoint activity, authentication events, and system logs.</li>
<li>Identify indicators of compromise (IOCs), indicators of attack (IOAs), and attacker behaviors.</li>
<li>Determine root cause and attack vectors.</li>
<li>Assess the extent of compromise across affected systems.</li>
<li>Identify persistence mechanisms and unauthorized access.</li>
<li>Recommend remediation and long-term defensive improvements.</li>
</ul>
Digital Forensic Triage
<ul>
<li>Collect and preserve digital evidence in accordance with forensic best practices.</li>
<li>Perform preliminary forensic analysis of endpoints, servers, and cloud resources.</li>
<li>Review memory captures, event logs, registry artifacts, file systems, browser artifacts, and authentication records.</li>
<li>Support chain-of-custody documentation.</li>
<li>Coordinate with Digital Forensics Analysts for advanced forensic examinations when required.</li>
</ul>
Malware Analysis Support
<ul>
<li>Analyze suspicious files and malicious code using approved analysis tools.</li>
<li>Identify malware behavior and associated indicators.</li>
<li>Review sandbox analysis results.</li>
<li>Document malware characteristics and recommended detection signatures.</li>
<li>Coordinate with Threat Intelligence and Threat Hunting personnel regarding emerging threats.</li>
</ul>
Threat Detection and Analysis
<ul>
<li>Investigate alerts generated by SIEM, EDR, IDS/IPS, and XDR platforms.</li>
<li>Correlate data from multiple security tools to identify attack patterns.</li>
<li>Evaluate threat intelligence to determine relevance to ongoing investigations.</li>
<li>Recommend improvements to detection logic based on investigative findings.</li>
<li>Assist in developing new detection use cases.</li>
</ul>
Security Tool Operations

Utilize technologies including:
<ul>
<li>Microsoft Sentinel</li>
<li>Splunk Enterprise Security</li>
<li>Microsoft Defender XDR</li>
<li>Microsoft Defender for Endpoint</li>
<li>Microsoft Defender for Identity</li>
<li>Microsoft Defender for Cloud</li>
<li>CrowdStrike Falcon</li>
<li>Palo Alto Cortex XDR</li>
<li>Trellix</li>
<li>Cisco Secure</li>
<li>Wireshark</li>
<li>Velociraptor</li>
<li>Security Information and Event Management (SIEM)</li>
<li>Endpoint Detection and Response (EDR)</li>
<li>Extended Detection and Response (XDR)</li>
</ul>
Support tuning and optimization of security monitoring technologies based on incident findings.

Reporting and Documentation

Develop and maintain:
<ul>
<li>Incident Reports</li>
<li>After-Action Reports</li>
<li>Root Cause Analyses</li>
<li>Investigation Summaries</li>
<li>Lessons Learned</li>
<li>Security Recommendations</li>
<li>Executive Briefings</li>
<li>Incident Metrics</li>
<li>Threat Assessments</li>
<li>Standard Operating Procedures</li>
</ul>
Ensure documentation is complete, technically accurate, and suitable for operational and audit purposes.

Collaboration
<ul>
<li>Coordinate with Tier 1 SOC Analysts, Threat Hunters, Digital Forensics Analysts, Security Engineers, ISSOs, System Owners, and Government stakeholders.</li>
<li>Participate in incident response working groups.</li>
<li>Provide technical guidance during active cybersecurity incidents.</li>
<li>Support enterprise cybersecurity exercises and tabletop events.</li>
<li>Share investigative findings with cross-functional cybersecurity teams.</li>
</ul>
Continuous Improvement
<ul>
<li>Recommend improvements to incident response procedures and playbooks.</li>
<li>Participate in lessons-learned reviews following significant incidents.</li>
<li>Assist with development of new detection capabilities.</li>
<li>Monitor emerging attack techniques and defensive technologies.</li>
<li>Maintain technical proficiency through ongoing training and professional certification.</li></ul> 


Minimum Qualifications
<ul>
<li>Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Systems, Digital Forensics, or a related discipline.</li>
<li>Minimum four (4) years of experience performing cybersecurity incident response or cyber defense operations.</li>
<li>Experience investigating enterprise cybersecurity incidents.</li>
<li>Experience using SIEM, EDR, XDR, and log analysis platforms.</li>
<li>Understanding of networking protocols, operating systems, malware behavior, and common attack techniques.</li>
<li>Strong analytical, investigative, documentation, and communication skills.</li>
<li>U.S. Citizenship required.</li>
<li>Ability to obtain and maintain a Tier 2 Public Trust.</li></ul> 


Preferred Qualifications
<ul>
<li>Experience supporting a Federal civilian agency.</li>
<li>Experience performing digital forensic triage or malware analysis.</li>
<li>Experience supporting cloud incident response in Microsoft Azure or AWS environments.</li>
<li>Experience utilizing MITRE ATT&amp;CK during investigations.</li>
<li>GIAC Certified Incident Handler (GCIH)</li>
<li>CompTIA CySA+</li>
<li>CompTIA Security+</li>
<li>GIAC Certified Forensic Analyst (GCFA)</li>
<li>Microsoft Certified: Security Operations Analyst Associate (SC-200)</li>
<li>Certified Ethical Hacker (CEH) (preferred)</li></ul> 


Knowledge, Skills, and Abilities
<ul>
<li>Incident Response</li>
<li>Cyber Defense Operations</li>
<li>Digital Forensic Triage</li>
<li>Malware Analysis</li>
<li>Threat Detection</li>
<li>Threat Intelligence</li>
<li>Microsoft Sentinel</li>
<li>Splunk Enterprise Security</li>
<li>Microsoft Defender XDR</li>
<li>Microsoft Defender for Endpoint</li>
<li>Microsoft Defender for Cloud</li>
<li>Endpoint Detection and Response (EDR)</li>
<li>Extended Detection and Response (XDR)</li>
<li>Security Information and Event Management (SIEM)</li>
<li>Wireshark</li>
<li>Velociraptor</li>
<li>Log Analysis</li>
<li>Network Traffic Analysis</li>
<li>Windows Security</li>
<li>Linux Security</li>
<li>Cloud Security</li>
<li>MITRE ATT&amp;CK Framework</li>
<li>NIST SP 800-61 Incident Response</li>
<li>NIST Cybersecurity Framework</li>
<li>Technical Documentation</li>
<li>Root Cause Analysis</li>
<li>Microsoft Office Suite</li>
<li>ServiceNow</li>
<li>Jira</li></ul> 


Security Requirements
<ul>
<li>Ability to successfully obtain and maintain a Tier 2 Public Trust investigation.</li>
<li>Compliance with all applicable Federal security, privacy, ethics, and information assurance training requirements before receiving system access.</li>
<li>Ability to support incident response activities, emergency cybersecurity operations, scheduled maintenance windows, continuity of operations (COOP), and surge support as required.</li>
<li>Must maintain strict confidentiality while handling sensitive incident data, forensic evidence, investigative records, and Federal information systems.</li>
<li>Ability to respond effectively to cybersecurity incidents in a fast-paced operational environment while coordinating with Government stakeholders, technical teams, and program leadership to minimize risk and restore secure operations.</li></ul></div>

Cybersecurity Analyst, Incident Responder

Join Digital Global Connectors and explore 4   exciting career opportunities. They're hiring for various roles with options for remote or on-site work. Apply today and become part of their innovative team.

Digital Global Connectors

About Company

Zero Trust Architect

Vulnerability Management Engineer

Security Architect

Cybersecurity Analyst, Incident Responder