Sr. Cyber Security Engineer

Chickasaw Nation Industries, Inc.•Fort Meade, MD

7d•$170,000 - $180,000

About The Position

The Cloud Information Assurance Analyst 5 provides advanced technical expertise to the agency by defining and assessing technical problems and needs, advising senior management and staff on approaches to resolving issues, and recommending solutions based on specialized capabilities. The role performs and integrates complex services across operational, functional, and organizational areas. The position analyzes, independently validates assessments, and conducts continuous monitoring for authorized Cloud Service Providers (CSPs) and their Cloud Service Offerings. It reviews CSP security documentation and prepares certification validation packages, including validated cybersecurity controls, recommendations, residual-risk statements, briefing slides, and provisional authorizations. For validations leading to a Joint Authorization Board Provisional Authorization, the package also includes an executive summary. The role supports DoD and FedRAMP cloud authorizations through continuous monitoring, annual reviews, and significant-change reviews. This includes assessing CSP risk posture through documentation reviews, recommendations, written reports, and briefings. The position is contingent upon award or funding, and its duties, qualifications, and salary may change.

Requirements

Ability to obtain, maintain, and access classified information at the Top Secret/SCI level; U.S. citizenship is required.
Bachelor’s degree and a minimum of eight years of relevant experience, or an equivalent combination of education and experience.
DoD 8570 IAM/IAT III certification.
Expert knowledge of proven business and operations practices and strategies.
Proficient understanding of RESTful APIs and JSON.
Ability to facilitate organizational change and development.
Strong organization and time-management skills, including the ability to manage multiple priorities.
Strong analytical, problem-solving, and business-requirements assessment skills.
Leadership skills to motivate, influence, and lead others.
Proficiency in briefing managers and communicating recommendations.
Excellent verbal and written communication skills.
Customer-service and relationship-management skills.
Ability to interact effectively with management and staff at all levels of a multi-level organization.
Proficient understanding of cross-browser compatibility issues and workarounds.
Experience with configuration management, version control, software packaging, and deployment.
Ability to perform system analysis, design, and development.

Responsibilities

Analyze and independently validate assessments for authorized Cloud Service Providers and their Cloud Service Offerings.
Conduct continuous monitoring and develop processes and procedures documenting analysis and validation activities.
Review CSP documentation, including System Security Plans (SSPs), Security Assessment Plans (SAPs), Security Assessment Reports (SARs), and Plans of Action and Milestones (POA&Ms).
Prepare Cloud Security Assessment Packages containing validated cybersecurity controls, the certifier’s recommendation and residual-risk statement, certification assessment briefing slides, and a provisional authorization.
Prepare a one-page executive summary when a validation leads to a Joint Authorization Board Provisional Authorization.
Provide DoD and FedRAMP cloud authorization support, including continuous monitoring, annual reviews, and significant-change requests.
Review deviation requests, monthly one-pagers, annual assessments, playbooks, significant-change requests, scan data, POA&Ms, and other changes to evaluate changes in a CSP’s ongoing risk posture.
Brief managers and communicate recommendations regarding project operations and status.
Identify problems proactively and respond effectively.
Handle sensitive and confidential information with discretion.
Work effectively both independently and as part of a team.