Cloud Security Assessor Job at Chickasaw Nation Industries, Inc (CNI) (Ft. Meade)

Cloud Security Assessor

The Cloud Information Assurance Analyst provides support to the agency. This pos...

Location

United States , Ft. Meade

Salary:

131000.00 - 155000.00 USD / Year

Chickasaw Nation Industries, Inc (CNI)

Expiration Date

Until further notice

Requirements

Required DOD Top Secret Clearance with SCI eligibility
Must have DOD 8570 IAM III Certification - CISSP, CISM
Expert knowledge of proven business and operations practices and strategies
Proficient understanding of Restful APIs, JSON
Proven ability to facilitate progressive organizational change / development within a growing organization
Excellent organization and time management skills with ability to handle multiple priorities
Exceptional analytical and problem-solving skills with ability to assess business requirements
Exceptional leadership skills with ability to motivate, influence and lead others
High level of proficiency in briefing managers and communicating recommendations regarding status of project operations
Excellent verbal and written communications skills

Job Responsibility

Performs analysis, conduct independent validation of assessments and continuous monitoring for authorized Cloud Service Providers Cloud Service Offerings
Develop processes and procedures to document the execution of the analysis and validations
Reviews Cloud Service Provider documentation consisting of the System Security Plan (SSP), Security Assessment Plan (SAP), Security Assessment Report (SAR), and associated POA&M
Prepares Cloud Security Assessment Package
Performs DoD and FedRAMP Cloud Authorization on-going support to include continuous monitoring, annual reviews, and significant change requests of Cloud Service Providers through reviews, recommendations, written reports, and briefings
Reviews and analyzes Deviation Requests, Monthly One Pagers, Annual Assessments, Playbooks, Significant Change Requests, review of scan data, POA&Ms, and other changes to evaluate a CSP’s ongoing risk posture change

What we offer

Medical
Dental
Vision
Company Life Insurance
Short-Term and Long-Term Disability Insurance
401(K) Immediate Vesting
Professional Development Assistance
Legal Aid Assistance Program
Family Planning / Fertility Assistance
Personal Time Off

Fulltime

Security Engineer 4 - FedRAMP Compliance Architect

PagerDuty is seeking a Security Engineer 4 - FedRAMP Compliance Architect to joi...

Location

United States

Salary:

176000.00 - 281000.00 USD / Year

PagerDuty

Expiration Date

Until further notice

Requirements

5+ years of experience in cloud security architecture, compliance, or cybersecurity engineering
at least 3 years of experience supporting FedRAMP Moderate or High authorization
deep expertise in FedRAMP, NIST 800-53, FISMA, and cloud security best practices
strong ability to assess security risks and recommend technical and procedural mitigations
experience working with AWS GovCloud, Azure Government, or other federal cloud environments
experience with audit preparation, risk assessments, and working with third-party assessors (3PAOs)
exceptional written and verbal communication skills for creating and managing FedRAMP documentation

Job Responsibility

Design, implement, and maintain system architectures to align with FedRAMP requirements
serve as the subject matter expert (SME) on FedRAMP, advising internal teams on security best practices, control implementations, and risk mitigation strategies
collaborate with engineering, operations, product, and corporate IT teams to develop secure cloud-based architectures that meet federal compliance mandates
implement governance strategy on technical security controls, including access management, configuration, encryption, logging, monitoring, and vulnerability management
support annual assessments, security control reviews, and audits, coordinating with third-party assessors (3PAO) and government sponsors
technical support for external stakeholders on customer responsibilities
key contributor to the development and maintenance of the System Security Plan (SSP), Policies and Procedures, Configuration Management Plan, Secure System Development Life Cycle, and other FedRAMP documentation
partner with the GRC (Governance, Risk, and Compliance) team to efficiently track and resolve security findings

What we offer

Competitive salary
comprehensive benefits package from day one
flexible work arrangements
company equity
ESPP (Employee Stock Purchase Program)
retirement or pension plan
generous paid vacation time
paid holidays and sick leave
Dutonian Wellness Days & HibernationDuty - companywide paid days off in addition to PTO
paid parental leave: 22 weeks for pregnant parent, 12 weeks for non-pregnant parent

Fulltime

New

Security Systems Engineer

We are seeking a Systems Engineer to own, architect, and maintain our Microsoft ...

Location

United States , Kalamazoo

Salary:

Not provided

Bodwé Professional Services

Expiration Date

Until further notice

Requirements

Bachelor’s degree in computer science, information technology, cybersecurity, or related field (or equivalent experience)
Minimum 2–4 years of experience in security operations, systems engineering, or cloud security
Hands-on experience deploying, operating, and maintaining Microsoft Sentinel, Microsoft Defender (endpoint, identity, etc.), and Purview (or similar Microsoft security/GRC tools)
Understanding of SIEM, security alerts, log aggregation, and incident response
Experience building dashboards, reports, and alerts to drive visibility and compliance
Scripting, automation, or orchestration experience (PowerShell, Azure Automation, Logic Apps, or similar)

Job Responsibility

Administer and maintain security tooling across the Microsoft environment. Microsoft Sentinel, Microsoft Defender, and Microsoft Purview (or equivalent Microsoft 365 / Purview data governance tools)
In conjunction with MSP, manage and optimize security dashboards, alerts, and reporting for threat detection, incident response, and risk metrics. Own vendor response management and success metrics
Build and maintain compliance reporting to support NIST 800-171 controls, working with compliance lead and vendors to align technical controls with policy
Implement and maintain security tooling (automation, playbooks) to reduce manual work, improve reaction times, and ensure consistency
Own change management documentation for all security-related system changes across our Microsoft cloud environment, including SIEM, endpoint security, identity, and data governance controls
Monitor security events, triage alerts, investigate potential incidents, and support remediation efforts in coordination with other MSP. Escalate to Compliance and Ops leads for org messaging and alerts
Conduct regular tuning of detection rules, logs, and telemetry to reduce noise and improve coverage
Assist MSP in threat hunting, threat modeling, and proactive security assessments
Manage data governance and classification via Purview (or equivalent): define and enforce data classification, labeling, retention, and access policies
Provide technical oversight for user and endpoint security posture

Fulltime

Security Engineer 4 - FedRAMP Compliance Architect

PagerDuty is seeking a Security Engineer 4 - FedRAMP Compliance Architect to joi...

Location

United States , Atlanta

Salary:

176000.00 - 281000.00 USD / Year

PagerDuty

Expiration Date

Until further notice

Requirements

5+ years of experience in cloud security architecture, compliance, or cybersecurity engineering, with at least 3 years of experience supporting FedRAMP Moderate or High authorization
Deep expertise in FedRAMP, NIST 800-53, FISMA, and cloud security best practices
Strong ability to assess security risks and recommend technical and procedural mitigations
Experience working with AWS GovCloud, Azure Government, or other federal cloud environments
Experience with audit preparation, risk assessments, and working with third-party assessors (3PAOs)
Exceptional written and verbal communication skills for creating and managing FedRAMP documentation

Job Responsibility

Design, implement, and maintain system architectures to align with FedRAMP requirements
Serve as the subject matter expert (SME) on FedRAMP, advising internal teams on security best practices, control implementations, and risk mitigation strategies
Collaborate with engineering, operations, product, and corporate IT teams to develop secure cloud-based architectures that meet federal compliance mandates
Implement governance strategy on technical security controls, including access management, configuration, encryption, logging, monitoring, and vulnerability management
Support annual assessments, security control reviews, and audits, coordinating with third-party assessors (3PAO) and government sponsors
Technical support for external stakeholders on customer responsibilities
Key contributor to the development and maintenance of the System Security Plan (SSP), Policies and Procedures, Configuration Management Plan, Secure System Development Life Cycle, and other FedRAMP documentation
Partner with the GRC (Governance, Risk, and Compliance) team to efficiently track and resolve security findings

What we offer

Competitive salary
Comprehensive benefits package from day one
Flexible work arrangements
Company equity
ESPP (Employee Stock Purchase Program)
Retirement or pension plan
Generous paid vacation time
Paid holidays and sick leave
Dutonian Wellness Days & HibernationDuty - companywide paid days off in addition to PTO
Paid parental leave: 22 weeks for pregnant parent, 12 weeks for non-pregnant parent (some countries have longer leave standards and we comply with local laws)

Fulltime

SCA Level IV/SME

Arcfield's Cyber programs are expanding and are currently in need of Level IV/ S...

Location

United States , Chantilly

Salary:

Not provided

Arcfield

Expiration Date

Until further notice

Requirements

Must possess and be able to maintain a TS/SCI clearance with polygraph
BS 12-15, MS 10-13, PhD 10+
A STEM degree
SCA experience
Certifications: CAP, CASP, CISM, CISSP (or Associate), GSCL, CGRC/CAP, Cloud+, CYSA+, GSEC, PenTest+
Relevant experience in technical project management
Advanced IS security skills and knowledge
Familiarity with IA concepts
Ability to review and recommend vulnerability and risk levels associated with SW and HW products
Practical experience developing and implementing security related directives

Job Responsibility

Review and assess information systems (IS) for compliance with IC, DoD, and ND guidelines
Provide security advice and guidance to government and industry partners
Advise Information System Owners (ISO) on confidentiality, integrity, and availability impact values
Offer technical guidance for Authorization and Accreditation (A&A) responses
Evaluate IS threats and vulnerabilities, recommending additional safeguards as needed
Support development and implementation of customer’s IT-IA-IM policies
Contribute to future Customer IS security policy development
Conduct site visits and assessments, prepare written reports for government approval
Ensure completion of security control assessments for each IS
Support RMF process-related presentations, briefings, and reports

Fulltime

Services Trust and Assurance Engineer

As HPE Aruba Networking's customers pivot to consume more of their networking ca...

Location

United States

Salary:

101900.00 - 234500.00 USD / Year

Hewlett Packard Enterprise

Expiration Date

Until further notice

Requirements

5-10 years of relevant work experience
Background in Governance, Risk, and Compliance (GRC)
Bachelor’s degree from an accredited college or university, or equivalent broad-based experience in the workforce
Understanding of Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform
Certifications such as AWS Cloud Practitioner or AWS Certified Solutions Architect are highly desirable
A broad understanding of IT service accreditation, attestation, and certification frameworks such as CSA CCM, FedRAMP, PCI-DSS, SOC2, and ISO 27001
Excellent verbal and written communications skills
Understanding of privacy frameworks such as GDPR and CCPA
Certifications such as CISSP or CCSP are desirable

Job Responsibility

Working collaboratively with R&D teams developing software for Aruba services to ensure understanding and adoption of the NIST Secure Software Development Framework (SSDF / SP800-218) and achievement of desired maturity targets
Synchronize additional R&D requirements from other applicable assessment or regulatory frameworks such as SOC2, ISO 27001, FedRAMP, and PCI-DSS
Develop, plan, and execute a compliance and accreditation program for each customer-facing service based on customer needs
Engage third-party consultants, auditors, and assessors as necessary
Work with the HPE Privacy Office and the Chief Privacy Officer to ensure global privacy requirements are actively addressed
Interface regularly with HPE Global Security, SRE, and the HPE Transformation Office
Serve as a coordinating function if and when security incidents occur

What we offer

Health & Wellbeing
Personal & Professional Development
Unconditional Inclusion

Fulltime

New

Cyber Information Assurance Analyst III

The Cyber Information Assurance Analyst III supports the customer by performing ...

Location

United States , Ft. Meade

Salary:

115000.00 - 120000.00 USD / Year

Chickasaw Nation Industries, Inc (CNI)

Expiration Date

Until further notice

Requirements

Have an active DoD Top Secret clearance with SCI eligibility
DoD 8570 IAM/IA Technical (IAT) Level II certification
Demonstrated experience with STIGs (Security Technical Implementation Guides), Security Requirement Guides (SRGs), Plan of Action and Milestones (POA&Ms) and cybersecurity best practices
Advanced understanding of the RMF process, NIST SP 800- 37, NIST SP 800-53, CNSSI 1253
Demonstratable experience in risk analysis, control validation, and as a Security Control Assessor Representative (SCA-R)
Demonstrated experience with relevant tools such as eMASS, STIG Viewer, Nessus, ACAS, SCAP, or HBSS
Advanced understanding of key technologies areas/domain such as: Network, Mobility, Windows, UNIX, Cloud Environments and Cloud Native Tools/Services, Host Based Security System (HBSS)/Endpoint Security Solutions (ESS), Databases, Applications
Customer service skills
Bachelor's Degree and a minimum of eight (8) years of experience in systems security, or equivalent combination of education/experience

Job Responsibility

Use government-assigned tools to perform weekly updates, maintain records, and complete tasks
Coordinate with ISSMs and PMOs to understand system architecture, security requirements, and changes
Conduct risk analysis and authorization tasks across all RMF steps using approved RE5 tools and processes
Verify authorization boundaries and categorize systems (FIPS199)
Identify data classifications and conduct system-level risk assessments
Track system changes, assess impacts, and report updates to the AO
Evaluate authorization and change requests, web filtering, firewall exceptions, ports/protocols, cybersecurity risks, STIG/SRG compliance, and on-site security
Lead assessment visits, conduct briefings, and ensure proper documentation and reporting
Attend required government training and meetings to stay updated on process changes
Maintain access and proficiency in required government databases and cybersecurity tools

What we offer

Medical
Dental
Vision
401(k)
Family Planning/Fertility Assistance
STD/LTD/Basic Life/AD&D
Legal-Aid Program
Employee Assistance Program (EAP)
Paid Time Off (PTO) – (11) Federal Holidays
Training and Development Opportunities

Fulltime

New

Cyber Information Assurance Analyst III

The Cyber Information Assurance Analyst III supports the customer by performing ...

Location

United States , Ft. Meade

Salary:

115000.00 - 120000.00 USD / Year

Chickasaw Nation Industries, Inc (CNI)

Expiration Date

Until further notice

Requirements

Have an active DoD Top Secret clearance with SCI eligibility
DoD 8570 IAM/IA Technical (IAT) Level II certification
Demonstrated experience with STIGs (Security Technical Implementation Guides), Security Requirement Guides (SRGs), Plan of Action and Milestones (POA&Ms) and cybersecurity best practices
Advanced understanding of the RMF process, NIST SP 800- 37, NIST SP 800-53, CNSSI 1253
Demonstratable experience in risk analysis, control validation, and as a Security Control Assessor Representative (SCA-R)
Demonstrated experience with relevant tools such as eMASS, STIG Viewer, Nessus, ACAS, SCAP, or HBSS
Advanced understanding of key technologies areas/domain such as: Network, Mobility, Windows, UNIX, Cloud Environments and Cloud Native Tools/Services, Host Based Security System (HBSS)/Endpoint Security Solutions (ESS), Databases, Applications
Customer service skills
Bachelor's Degree and a minimum of eight (8) years of experience in systems security, or equivalent combination of education/experience

Job Responsibility

Use government-assigned tools to perform weekly updates, maintain records, and complete tasks
Coordinate with ISSMs and PMOs to understand system architecture, security requirements, and changes
Conduct risk analysis and authorization tasks across all RMF steps using approved RE5 tools and processes
Verify authorization boundaries and categorize systems (FIPS199)
Identify data classifications and conduct system-level risk assessments
Track system changes, assess impacts, and report updates to the AO
Evaluate authorization and change requests, web filtering, firewall exceptions, ports/protocols, cybersecurity risks, STIG/SRG compliance, and on-site security
Lead assessment visits, conduct briefings, and ensure proper documentation and reporting
Attend required government training and meetings to stay updated on process changes
Maintain access and proficiency in required government databases and cybersecurity tools

What we offer

Medical
Dental
Vision
401(k)
Family Planning/Fertility Assistance
STD/LTD/Basic Life/AD&D
Legal-Aid Program
Employee Assistance Program (EAP)
Paid Time Off (PTO) – (11) Federal Holidays
Training and Development Opportunities

Fulltime

Cloud Security Assessor

Chickasaw Nation Industries, Inc (CNI)

Location:
United States , Ft. Meade

Category:
IT - Administration

Contract Type:
Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Additional Information:

Job Posted:
January 04, 2026

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Cloud Security Assessor

Cloud Security Assessor

Security Engineer 4 - FedRAMP Compliance Architect

Security Systems Engineer

Security Engineer 4 - FedRAMP Compliance Architect

SCA Level IV/SME

Services Trust and Assurance Engineer

Cyber Information Assurance Analyst III

Cyber Information Assurance Analyst III

Cloud Security Assessor

Chickasaw Nation Industries, Inc (CNI)

Location:United States , Ft. Meade

Category:IT - Administration

Contract Type:Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Additional Information:

Job Posted:January 04, 2026

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Cloud Security Assessor

Cloud Security Assessor

Security Engineer 4 - FedRAMP Compliance Architect

Security Systems Engineer

Security Engineer 4 - FedRAMP Compliance Architect

SCA Level IV/SME

Services Trust and Assurance Engineer

Cyber Information Assurance Analyst III

Cyber Information Assurance Analyst III

Location:
United States , Ft. Meade

Category:
IT - Administration

Contract Type:
Not provided

Job Posted:
January 04, 2026