Senior Information Security Analyst, SME

DMI is a leading provider of digital services and technology solutions, headquartered in Tysons Corner, VA. With a focus on end-to-end managed IT services, including managed mobility, cloud, cybersecurity, network operations, and application development, DMI supports public sector agencies and commercial enterprises around the globe. Recognized as a Top Workplace, DMI is committed to delivering secure, efficient, and cost-effective solutions that drive measurable results. Learn more at www.dminc.com

DMI is seeking a Senior Information Security Analyst, SME to support cybersecurity operations for a large program. Serving as a trusted technical advisor, this role provides expert guidance on cybersecurity operations, security engineering, risk management, and regulatory compliance while protecting enterprise systems supporting CDC's public health mission.

The successful candidate will partner with infrastructure, identity management, application support, and program leadership to strengthen security posture, respond to emerging threats, and implement security best practices aligned with federal cybersecurity standards.

• →Provide senior technical leadership for cybersecurity operations, risk management, and security engineering initiatives.
• →Analyze security events, vulnerabilities, and emerging threats; coordinate investigation and response activities.
• →Support the implementation of Zero Trust Architecture, identity security, and access management strategies.
• →Perform security assessments, risk analyses, and compliance reviews in accordance with NIST guidance and federal security requirements.
• →Collaborate with infrastructure and application teams to remediate vulnerabilities and strengthen system security.
• →Support incident response activities, forensic investigations, and post-incident reporting.
• →Develop and maintain security documentation, policies, standards, and operational procedures.
• →Evaluate security technologies and recommend improvements that enhance enterprise security and operational resilience.
• →Provide technical guidance and mentorship to security analysts and project teams.
• →Promote continuous improvement by identifying opportunities to automate security processes and strengthen organizational cyber resilience. 

• Bachelor's degree in Cybersecurity, Information Assurance, Computer Science, or related field (or equivalent experience).
• 10+ years of progressive cybersecurity experience, including leadership responsibilities.
• Extensive knowledge of NIST RMF, FISMA, Zero Trust Architecture, identity and access management, vulnerability management, and incident response.
• Experience supporting enterprise Windows and cloud environments.
• Strong analytical, communication, and leadership skills.

• Experience supporting HHS or other Federal agencies.
• One or more professional certifications, such as CISSP, CISM, GSLC, Security+, or GIAC.
• Experience supporting cloud security, Microsoft Azure, Microsoft Defender, and Microsoft Sentinel.
• Familiarity with ServiceNow Security Operations (SecOps).
• Experience supporting enterprise identity and privileged access management solutions.