Cybersecurity Monitoring Engineer

DMDC supports the Defense Human Resources Activity within the Office of the Under Secretary of Defense for Personnel and Readiness (OUSD(P&R)) and maintains the Department of Defense’s largest and most comprehensive central repository of personnel, manpower, casualty, pay, entitlement, personnel security, identity, readiness, training, and related data. The DHRA Information Technology (IT) environment includes approximately 15,000 network and endpoint devices supporting more than 600 Government-Off-The-Shelf (GOTS) applications and approximately 100 Risk Management Framework (RMF) authorization boundaries managed through the Enterprise Mission Assurance Support Service (eMASS). Cybersecurity operations within this environment depend on coordinated monitoring and oversight across DMDC cybersecurity organizations, IT operations, system owners, and external Cybersecurity Service Providers (CSSPs). The Cybersecurity Monitoring Engineer will help ensure that Government-mandated cybersecurity

• Bachelor of Science degree in Computer Science, Cybersecurity, Information Technology, Engineering, or a related technical discipline with 4 or more years of relevant professional experience. Specific experience, education and training may be considered in lieu of degree.

capabilities are deployed, functioning, connected, reporting correctly, and providing the coverage necessary to identify and reduce enterprise cyber risk. \n \n \nPrimary Responsibilities:\n \n \n \n

• Monitor DHRA cybersecurity posture using Government-mandated and Government-provided cybersecurity tools and capabilities.\n

\n \n \n

• Support Tier 3 and shared Tier 2 cybersecurity monitoring and troubleshooting responsibilities in coordination with Cybersecurity Service Providers.\n

\n \n \n

• Validate cybersecurity tool configuration, deployment, operability, connectivity, data rollups, updates, and overall compliance with applicable DHRA, Department of Defense, and National Institute of Standards and Technology (NIST) requirements.\n

\n \n \n

• Assess whether required cybersecurity capabilities are deployed and operating across the appropriate DHRA systems, networks, and assets.\n

\n \n \n

• Compare cybersecurity-tool coverage against authoritative asset inventories to identify gaps, missing coverage, configuration issues, or systems that are not reporting as expected.\n

\n \n \n

• Identify and report tool failures, outages, connectivity issues, data-quality problems, and other conditions that may reduce cybersecurity visibility or effectiveness.\n

\n \n \n

• Open, document, track, and coordinate technical tickets through resolution and support troubleshooting with system owners, IT operations, tool administrators, Cybersecurity Service Providers, and other technical organizations.\n

\n \n \n

• Support development and monitoring of corrective action and get-well plans for identified cybersecurity tool or coverage deficiencies.\n

\n \n \n

• Validate corrective actions and document whether identified deficiencies have been successfully resolved.\n

\n \n \n

• Develop measurable and traceable cybersecurity monitoring metrics that provide Government leadership visibility into tool health, enterprise coverage, compliance, and unresolved issues.\n

\n \n \n

• Analyze recurring monitoring results to identify trends, systemic issues, and opportunities to improve cybersecurity capabilities.\n

\n \n \n

• Recommend cybersecurity tool enhancements, configuration improvements, or process changes based on monitoring results and identified operational gaps.\n

\n \n \n

• Document approved baseline changes and maintain cybersecurity monitoring tactics, techniques, and procedures (TTPs).\n

\n \n \n

• Support security scanning, mitigation activities, compliance cross-checking, and cybersecurity-system troubleshooting.\n

\n \n \n

• Review technical work products and monitoring results for accuracy, completeness, and compliance with established cybersecurity standards and requirements.\n, n \n \n

• Experience supporting cybersecurity monitoring, security engineering, cybersecurity operations, or enterprise security-tool environments.\n

\n \n \n

• Experience evaluating the configuration, connectivity, availability, coverage, or operational status of cybersecurity tools and capabilities.\n

\n \n \n

• Experience identifying technical issues and working across multiple organizations to troubleshoot and resolve cybersecurity-tool or infrastructure problems.\n

\n \n \n

• Experience reviewing cybersecurity findings, system status, or technical data to identify deficiencies and recommend corrective actions.\n

\n \n \n

• Working knowledge of Department of Defense cybersecurity requirements, NIST security guidance, or comparable Federal cybersecurity standards.\n

\n \n \n