Cybersecurity Senior Analyst

Fire Creek Services Company, an All Native Group company, is seeking a Cybersecurity / RMF Lead to lead security authorization for a cloud-hosted maintenance management platform, including IL4/IL5 control implementation, RMF/ATO evidence, CUI protection and NIST SP 800-171 compliance, continuous monitoring and incident reporting. This is an immediate opening.

Essential Functions

Prepare and manage the security authorization package (SSP, POA&M and control evidence) in coordination with the Mission Owner and Authorizing Official.
Implement identity, access and data controls (CAC/PIV federation, role separation, audit records and secrets management).
Define operational technology (OT) segmentation for sensors, gateways and building controllers.
Run vulnerability management, continuous monitoring and required incident reporting.
Maintain NIST SP 800-171 evidence and support CMMC assessments.
Deliver security awareness content for technicians and administrators.
Run vulnerability scans on a regular, defined schedule and track remediation to closure.
Review audit logs and security alerts and investigate suspicious activity.
Perform security impact analysis on proposed system changes.

Competencies

RMF/ATO package development
DoD cybersecurity controls
Risk assessment and continuous monitoring
Clear security communication and training
Audit log review and threat analysis

Supervisory Responsibility

None required for this position

Work Environment

Remote or office-based, computer-focused work, with periodic on-site travel to Fort Campbell, Kentucky.

Physical Demands

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job.

Prolonged periods sitting at a desk and working on a computer.
Must be able to lift up to 25 lb.
Occasional walking of buildings and mechanical spaces during on-site security walkdowns.

Position Type/Expected Hours of Work

Full-time and part-time positions available. Typical hours are Monday through Friday, daytime.

Travel

Periodic travel to Fort Campbell, Kentucky, for authorization meetings and operational technology walkdowns.

Experience

7+ years of DoD cybersecurity experience.
3+ years leading RMF/ATO packages (eMASS) through authorization.
Authored ATO packages that were granted.
Working knowledge of Azure Government or equivalent cloud security tooling.

Preferred:

NIST SP 800-171 and CMMC assessments.
Army authorization processes.
OT/IoT security (NIST SP 800-82).
Experience with ACAS/Nessus vulnerability scanning and DISA STIGs.
Experience with SIEM tools (e.g., Microsoft Sentinel or Splunk).
Experience working on Department of Defense (DoD) installations, contracts or programs is a plus.

Education

Bachelor's degree in Cybersecurity, Information Systems or a related field.

Additional Eligibility Qualifications

CISSP or CISM (DoD 8140 IAM Level II/III) required.
CompTIA Security+ required at minimum.
Must be able to pass a background check and obtain installation access.

Drug Free Workplace

All Native Group is a Drug Free Workplace. It is our policy that all new hires must successfully complete a pre-employment drug screen as a condition of employment. In addition, all employees are subject to random drug screens throughout the term of their employment with All Native Group.

Security Clearance

None

AAP/EEO Statement 

All Native Group is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. However, preference may be extended to persons of Indian descent in accordance with applicable laws.

About Ho-Chunk, Inc. & All Native Group

Ho-Chunk, Inc. is an award-winning economic development corporation of the Winnebago Tribe of Nebraska. Our mission is to provide long-term economic development for the Winnebago Tribe and job opportunities for Tribal members.

All Native Group is a network of small businesses that support the critical missions of various U.S. Government customers. Our capabilities include telecommunications, health, logistics, specialized training, professional services, and IT solutions. Since earning our first federal contract in 2004, we have continued to grow and diversify our services while maintaining a strong commitment to excellence. As a tribally owned organization, All Native Group operates multiple subsidiary businesses, providing clients with the advantages of working with a small business while leveraging the resources and expertise of a larger, established company. Our work is guided by our core NATIVE values:

Native American Owned & Proud – Serving the Winnebago Tribe of Nebraska.
Accountable – To always do what’s right.
Team-Focused – For inclusive progress.
Innovative – In creating solutions.
Visionary – In our purpose and direction.
Excellence – Through learning and performance.

Other Duties

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.

Originally posted on Himalayas

Job Description

Summary

Essential Functions

Prepare and manage the security authorization package (SSP, POA&M and control evidence) in coordination with the Mission Owner and Authorizing Official.
Implement identity, access and data controls (CAC/PIV federation, role separation, audit records and secrets management).
Define operational technology (OT) segmentation for sensors, gateways and building controllers.
Run vulnerability management, continuous monitoring and required incident reporting.
Maintain NIST SP 800-171 evidence and support CMMC assessments.
Deliver security awareness content for technicians and administrators.
Run vulnerability scans on a regular, defined schedule and track remediation to closure.
Review audit logs and security alerts and investigate suspicious activity.
Perform security impact analysis on proposed system changes.

Competencies

RMF/ATO package development
DoD cybersecurity controls
Risk assessment and continuous monitoring
Clear security communication and training
Audit log review and threat analysis

Supervisory Responsibility

None required for this position

Work Environment

Remote or office-based, computer-focused work, with periodic on-site travel to Fort Campbell, Kentucky.

Physical Demands

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job.

Prolonged periods sitting at a desk and working on a computer.
Must be able to lift up to 25 lb.
Occasional walking of buildings and mechanical spaces during on-site security walkdowns.

Position Type/Expected Hours of Work

Full-time and part-time positions available. Typical hours are Monday through Friday, daytime.

Travel

Periodic travel to Fort Campbell, Kentucky, for authorization meetings and operational technology walkdowns.

Experience

7+ years of DoD cybersecurity experience.
3+ years leading RMF/ATO packages (eMASS) through authorization.
Authored ATO packages that were granted.
Working knowledge of Azure Government or equivalent cloud security tooling.

Preferred:

NIST SP 800-171 and CMMC assessments.
Army authorization processes.
OT/IoT security (NIST SP 800-82).
Experience with ACAS/Nessus vulnerability scanning and DISA STIGs.
Experience with SIEM tools (e.g., Microsoft Sentinel or Splunk).
Experience working on Department of Defense (DoD) installations, contracts or programs is a plus.

Education

Bachelor's degree in Cybersecurity, Information Systems or a related field.

Additional Eligibility Qualifications

CISSP or CISM (DoD 8140 IAM Level II/III) required.
CompTIA Security+ required at minimum.
Must be able to pass a background check and obtain installation access.

Drug Free Workplace

Security Clearance

None

AAP/EEO Statement 

About Ho-Chunk, Inc. & All Native Group

Native American Owned & Proud – Serving the Winnebago Tribe of Nebraska.
Accountable – To always do what’s right.
Team-Focused – For inclusive progress.
Innovative – In creating solutions.
Visionary – In our purpose and direction.
Excellence – Through learning and performance.

Other Duties

Originally posted on Himalayas

Job Description

Summary

Essential Functions

Prepare and manage the security authorization package (SSP, POA&M and control evidence) in coordination with the Mission Owner and Authorizing Official.
Implement identity, access and data controls (CAC/PIV federation, role separation, audit records and secrets management).
Define operational technology (OT) segmentation for sensors, gateways and building controllers.
Run vulnerability management, continuous monitoring and required incident reporting.
Maintain NIST SP 800-171 evidence and support CMMC assessments.
Deliver security awareness content for technicians and administrators.
Run vulnerability scans on a regular, defined schedule and track remediation to closure.
Review audit logs and security alerts and investigate suspicious activity.
Perform security impact analysis on proposed system changes.

Competencies

RMF/ATO package development
DoD cybersecurity controls
Risk assessment and continuous monitoring
Clear security communication and training
Audit log review and threat analysis

Supervisory Responsibility

None required for this position

Work Environment

Remote or office-based, computer-focused work, with periodic on-site travel to Fort Campbell, Kentucky.

Physical Demands

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job.

Prolonged periods sitting at a desk and working on a computer.
Must be able to lift up to 25 lb.
Occasional walking of buildings and mechanical spaces during on-site security walkdowns.

Position Type/Expected Hours of Work

Full-time and part-time positions available. Typical hours are Monday through Friday, daytime.

Travel

Periodic travel to Fort Campbell, Kentucky, for authorization meetings and operational technology walkdowns.

Experience

7+ years of DoD cybersecurity experience.
3+ years leading RMF/ATO packages (eMASS) through authorization.
Authored ATO packages that were granted.
Working knowledge of Azure Government or equivalent cloud security tooling.

Preferred:

NIST SP 800-171 and CMMC assessments.
Army authorization processes.
OT/IoT security (NIST SP 800-82).
Experience with ACAS/Nessus vulnerability scanning and DISA STIGs.
Experience with SIEM tools (e.g., Microsoft Sentinel or Splunk).
Experience working on Department of Defense (DoD) installations, contracts or programs is a plus.

Education

Bachelor's degree in Cybersecurity, Information Systems or a related field.

Additional Eligibility Qualifications

CISSP or CISM (DoD 8140 IAM Level II/III) required.
CompTIA Security+ required at minimum.
Must be able to pass a background check and obtain installation access.

Drug Free Workplace

Security Clearance

None

AAP/EEO Statement 

About Ho-Chunk, Inc. & All Native Group

Native American Owned & Proud – Serving the Winnebago Tribe of Nebraska.
Accountable – To always do what’s right.
Team-Focused – For inclusive progress.
Innovative – In creating solutions.
Visionary – In our purpose and direction.
Excellence – Through learning and performance.

Other Duties

Originally posted on Himalayas

Job Description

Summary

Essential Functions

Prepare and manage the security authorization package (SSP, POA&M and control evidence) in coordination with the Mission Owner and Authorizing Official.
Implement identity, access and data controls (CAC/PIV federation, role separation, audit records and secrets management).
Define operational technology (OT) segmentation for sensors, gateways and building controllers.
Run vulnerability management, continuous monitoring and required incident reporting.
Maintain NIST SP 800-171 evidence and support CMMC assessments.
Deliver security awareness content for technicians and administrators.
Run vulnerability scans on a regular, defined schedule and track remediation to closure.
Review audit logs and security alerts and investigate suspicious activity.
Perform security impact analysis on proposed system changes.

Competencies

RMF/ATO package development
DoD cybersecurity controls
Risk assessment and continuous monitoring
Clear security communication and training
Audit log review and threat analysis

Supervisory Responsibility

None required for this position

Work Environment

Remote or office-based, computer-focused work, with periodic on-site travel to Fort Campbell, Kentucky.

Physical Demands

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job.

Prolonged periods sitting at a desk and working on a computer.
Must be able to lift up to 25 lb.
Occasional walking of buildings and mechanical spaces during on-site security walkdowns.

Position Type/Expected Hours of Work

Full-time and part-time positions available. Typical hours are Monday through Friday, daytime.

Travel

Periodic travel to Fort Campbell, Kentucky, for authorization meetings and operational technology walkdowns.

Experience

7+ years of DoD cybersecurity experience.
3+ years leading RMF/ATO packages (eMASS) through authorization.
Authored ATO packages that were granted.
Working knowledge of Azure Government or equivalent cloud security tooling.

Preferred:

NIST SP 800-171 and CMMC assessments.
Army authorization processes.
OT/IoT security (NIST SP 800-82).
Experience with ACAS/Nessus vulnerability scanning and DISA STIGs.
Experience with SIEM tools (e.g., Microsoft Sentinel or Splunk).
Experience working on Department of Defense (DoD) installations, contracts or programs is a plus.

Education

Bachelor's degree in Cybersecurity, Information Systems or a related field.

Additional Eligibility Qualifications

CISSP or CISM (DoD 8140 IAM Level II/III) required.
CompTIA Security+ required at minimum.
Must be able to pass a background check and obtain installation access.

Drug Free Workplace

Security Clearance

None

AAP/EEO Statement 

About Ho-Chunk, Inc. & All Native Group

Native American Owned & Proud – Serving the Winnebago Tribe of Nebraska.
Accountable – To always do what’s right.
Team-Focused – For inclusive progress.
Innovative – In creating solutions.
Visionary – In our purpose and direction.
Excellence – Through learning and performance.

Other Duties

Originally posted on Himalayas