Cyber Security Analyst

* Please note, that this position is contingent upon the award or funding. The essential duties, experience, education requirements, and salary are subject to change.*

The Cyber Security Analyst provides advanced cybersecurity engineering, RMF leadership, and enterprise compliance oversight for Department of the Air Force Financial Management (DAF FM) systems. This role leads the development, implementation, and assessment of security controls, produces authorization artifacts, conducts mission‑impact risk analysis, and provides decision support to the Authorizing Official (AO). The Sr Analyst also guides cybersecurity analysts and ISSOs and ensures compliance with Air Force directives, DoD RMF policy, and enterprise vulnerability management requirements.

Chickasaw Nation Industries, Inc. serves as a holding company with multiple subsidiaries engaged in several lines of business (Business Services, Health, Infrastructure and Engineering, Mission Optimization, Technology and Transportation) for the federal government and commercial enterprises. A portion of our profits is used to support Chickasaw citizens. We are proud to support the economic development and long-term viability of the Chickasaw Nation and its people.

• (Medical - Dental – Vision)
• Company Life Insurance
• Short-Term and Long-Term Disability Insurance
• 401(K) Immediate Vesting
• Professional Development Assistance
• Legal Aid Assistance Program
• Family Planning / Fertility Assistance
• Personal Time Off
• Observance of Federal Holidays

As a federal contractor, CNI is a drug-free workplace and adheres to the Federal Controlled Substance Act.

The ability to obtain, maintain and access classified information at the Top Secret level. Required Certification at the DoD 8410 WRC 722, Advanced level - CISSP, CISSP-ISSMP, CISM, GCIH, GICSP, or GSLC. Must support Air Force cybersecurity directives, including IAVA, TCNO, NOTAM implementation and verification.

Lead the RMF lifecycle, including security control selection, implementation validation, assessment preparation, and continuous monitoring for all systems under the FM AO. Develop, review, and sustain authorization artifacts such as System Security Plans (SSPs), Risk Assessment Reports (RARs), POA&Ms, and compliance evidence within eMASS and ITIPS. Conduct vulnerability assessments and enterprise‑level risk analysis; design mitigation strategies and coordinate remediation actions across system owners and PMOs.

Produce risk‑informed authorization decision packages (ATO, ATO with Conditions, Denial), including mission‑impact summaries for the AO. Analyze federal, DoD, and Air Force cybersecurity policy and translate requirements into actionable implementation guidance for system owners and ISSOs. Prepare cybersecurity briefings and status updates for FM leadership, governance bodies, and AO working groups. Support system optimization efforts by validating the cybersecurity impact of engineering changes and post‑deployment modifications.

Mentor junior cybersecurity analysts and ISSOs, providing technical guidance and quality oversight on RMF documentation and compliance tasks.

Bachelor's degree in Computer Science or related field and a minimum of eight (8) years of cybersecurity or information assurance engineering experience.

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of this job. Work is primarily performed in an office/warehouse setting. Regularly required to use hands to finger, handle, or feel.

Regularly required to reach with hands and arms, occasionally above head. Regularly required to twist at the waist, climb and descend stairs while carrying objects. Ability to speak and hear. Frequently required to stand, walk, stoop, kneel, crouch or crawl. Occasionally required to sit and climb or balance. Regularly lifts and/or moves up to twenty-five pounds and occasionally…