Senior Cybersecurity Analyst

Senior ISSO

The Senior ISSO manages the security, compliance, and risk authorization process for the DevSecOps software factory platform. This role requires a practical, technically minded lead who understands how to manage security boundaries, evaluate technical risks, and collaborate effectively with engineering and tenant teams. As the ISSO, you will support the Information Assurance (IA) team, serving as the primary security advisor to the Information Assurance Lead. You will have oversight of our security boundaries, manage our secure data transfer pathways, and ensure our pipelines align with established security baselines.

Chickasaw Nation Industries, Inc. serves as a holding company with multiple subsidiaries engaged in several lines of business for the federal government and commercial enterprises. A portion of our profits is used to support Chickasaw citizens. We are proud to support the economic development and long-term viability of the Chickasaw Nation and its people. CNI offers premium benefits eligible on the first day of hire to full time employees; (Medical - Dental – Vision), Company Life Insurance, Short-Term and Long-Term Disability Insurance, 401(K) Immediate Vesting, Professional Development Assistance, Legal Aid Assistance Program, Family Planning / Fertility Assistance, Personal Time Off, and Observance of Federal Holidays.

As a federal contractor, CNI is a drug-free workplace and adheres to the Federal Controlled Substance Act.

Essential duties and responsibilities include the following. Other duties may be assigned.

Execute and manage all Risk Management Framework (RMF) processes for Assessment & Authorization (A&A) to maintain the platform's authorization state.

Develop, maintain, and update the System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), Security Assessment Reports (SARs), and Authorization-to-Operate (ATO) artifacts directly within the official eMASS repository.

Conduct Independent Verification and Validation (IV&V) on all vulnerability scanning. Use ACAS and the IAVM/DTO process to monitor, track, and verify technical patching and remediation efforts.

Implement and validate the security controls mandated by NIST SP 800-53 Rev 5 and CNSSI 1253 Rev 5. Support and verify the technical hardening, patching, and STIG compliance for all operating systems (Linux/Windows) and network devices within our boundary.

Conduct critical Security Impact Assessments (SIAs) and Risk Assessments (RAs) on all proposed platform or system changes (such as new tenant onboardings or API integrations) to evaluate security risks prior to implementation.

Monitor system logs, assist with incident response activities, and ensure our continuous monitoring and compliance dashboards are accurately maintained.

Partner closely with our Lead Architect/Engineer, system administrators DevSecOps teams to ensure security is integrated into our pipelines and that they understand our security requirements.

Bachelor's degree in Computer Science or related field and a minimum of five (5) years' relevant experience. 5 to 8+ years of direct, hands-on experience working with the NIST Special Publications (specifically NIST 800-53 and CNSSI 1253), the DoD Risk Management Framework (RMF) processes, and eMASS.

The estimated pay range for this role is $105K to $115K, with the final offer contingent on location, skillset, and experience.

CNI offers a comprehensive benefits package that includes:

• Medical
• Dental
• Vision
• 401(k)
• Family Planning/Fertility Assistance
• STD/LTD/Basic Life/AD&D
• Legal-Aid Program
• Employee Assistance Program (EAP)
• Paid Time Off (PTO) – (11) Federal Holidays
• Training and Development Opportunities

Your application submission will be considered for all potential employment opportunities with Chickasaw Nation Industries (CNI).

#INDCNI