Cybersecurity SME - Continuous Diagnostics and Mitigation

ECS is seeking a Cybersecurity SME - Continuous Diagnostics and Mitigation to work in our Portland, OR office.

 

The Cybersecurity SME for Continuous Diagnostics and Mitigation (CDM) provides subject matter expertise in support of a federal energy sector cybersecurity program. This role ensures successful deployment, reporting, and alignment of CDM capabilities across the enterprise, while directly liaising with the Department of Homeland Security (DHS) CDM team and other federal stakeholders.  This is a hybrid position requiring 25-50% on-site support.

Core Capabilities

• Provide expertise in aligning solutions with current and emerging CDM architecture including asset management, identity and access management, network protection, and data security
• Liaise with DHS and agency stakeholders to ensure alignment with CDM requirements
• Ensure compliance with federal cybersecurity frameworks (e.g., FISMA, NIST 800-53, NIST 800-137, ISCM, CDM)
• Support dashboard development, data quality assurance, and metrics reporting in alignment with CDM reporting requirements
• Provide leadership to technical teams in the deployment, configuration, and integration of CDM tools
• Develop and maintain CDM processes, procedures, and supporting documentation
• Conduct training and knowledge transfer on CDM capabilities

Qualifications

• U.S. Citizenship with ability to obtain and maintain a DOE “L” clearance
• In-depth knowledge of CDM mission, architecture, and reporting requirements
• Experience with CDM tools and integrations (e.g., Archer, Splunk, Elasticsearch, Tenable, GRC platforms)
• Strong analytical and problem-solving skills
• Knowledge of NIST RMF and ISCM frameworks
• Strong stakeholder coordination and communication skills
• 10+ years preferred with progressive responsibility in large-scale programs
• 7+ years of cybersecurity experience in federal environments
• 3+ years directly supporting CDM or similar federal cybersecurity initiatives
• Bachelor’s degree in Cybersecurity, Information Technology, or related field, or equivalent experience