Overview
cFocus Software is seeking a Continuous Diagnostics and Mitigation (CDM) Team Lead to manage and oversee the implementation, operation, and continuous improvement of CDM capabilities for a federal agency. The CDM Team Lead will coordinate technical and operational activities to enhance the agency’s cybersecurity posture, ensure compliance with DHS CDM program requirements, and drive data-driven risk management across enterprise systems. This position requires significant experience supporting or leading CDM initiatives and the ability to manage cross-functional teams while maintaining alignment with federal cybersecurity policies and standards.This is a full-time position that may require on-site support at federal agency locations in the Washington, D.C. metro area. Some telework flexibility may be available depending on mission requirements. Must be able to obtain and maintain a Public Trust or higher-level security clearance as required by the agency.
Responsibilities
The Continuous Diagnostics and Mitigation (CDM) Team Lead shall perform duties that include, but are not limited to:- Lead the planning, execution, and oversight of the agency’s CDM program implementation in alignment with DHS requirements.
- Coordinate deployment of CDM tools and capabilities across asset management, identity and access management, network security, and data protection domains.
- Manage a cross-functional team responsible for integrating CDM capabilities into existing cybersecurity and IT infrastructures.
- Develop and maintain CDM dashboards, reports, and metrics to measure program effectiveness and compliance with federal mandates.
- Collaborate with DHS, CISA, and agency stakeholders to ensure timely data submission, continuous monitoring, and accurate reporting.
- Identify, track, and mitigate security risks through CDM data analytics and actionable intelligence.
- Ensure CDM toolsets are configured and maintained to collect, correlate, and analyze asset, vulnerability, and event data.
- Serve as the primary liaison between technical teams, program management, and federal leadership for CDM-related activities.
- Oversee continuous improvement of CDM processes, including automation of data ingestion, normalization, and reporting workflows.
- Ensure adherence to federal security frameworks such as FISMA, NIST SP 800-53, OMB M-21-31, and CISA guidance for CDM programs.
- Prepare and deliver executive-level briefings, project status updates, and risk assessments for agency leadership and DHS representatives.
- Provide mentoring, training, and performance oversight to CDM team members to ensure consistent quality and compliance.
Required Qualifications
- Highly relevant expertise derived from working directly in support of an agency-level CDM program for at least 3 years, or leading the implementation of CDM program capabilities for 5 years.
- CISSP certification.
- Project Management Professional (PMP) certification.
- Demonstrated ability to lead CDM program deployments across large, complex federal environments.
- Experience managing CDM capabilities in coordination with DHS, CISA, or equivalent federal cybersecurity oversight entities.
- Strong understanding of continuous monitoring, vulnerability management, and cybersecurity data analytics.
- Experience managing cross-functional teams and third-party vendors to deliver CDM-related capabilities.
- Excellent communication and leadership skills, including experience briefing executive and federal stakeholders.
Preferred Qualifications
- Experience supporting DHS or other federal agencies in the implementation of CDM tools and capabilities.
- Knowledge of CDM architecture components such as Agency-Wide Adaptive Risk Enumeration (AWARE) dashboards and CISA data exchange requirements.
- Proficiency with CDM toolsets including Archer, Splunk, Tenable, ServiceNow, or equivalent platforms.
- Experience with federal cybersecurity frameworks such as FISMA, NIST SP 800-53, and OMB memoranda relevant to continuous monitoring.
- Strong project management, analytical, and problem-solving abilities to ensure timely and compliant CDM implementation.
- Ability to document processes, policies, and lessons learned to support continuous improvement of CDM operations.