Cherokee Federal

• Design, build, test, and continuously improve Splunk Enterprise Security detection content. • Develop and tune correlation searches, notable events, adaptive response actions, dashboards, and investigation workflows. • Implement and optimize Risk-Based Alerting (RBA) strategies. • Improve detection quality while reducing false positives and minimizing false negatives. • Map detections to the MITRE ATT&CK Framework and maintain coverage metrics. • Partner with Incident Response teams to convert real-world incidents into improved detection content. • Participate in threat hunting, incident investigations, tabletop exercises, and purple team activities. • Develop cloud detections leveraging AWS GuardDuty, CloudTrail, Security Hub, IAM, EC2, S3, VPC Flow Logs, and related telemetry. • Maintain Common Information Model (CIM) compliance and improve data normalization. • Measure detection quality through precision, recall, MTTR, and analyst workload reduction. • Support future Splunk SOAR (Phantom) automation initiatives. • Integrate Splunk Enterprise Security with ServiceNow Incident Response and other security technologies. • Collaborate with Security Operations, Cloud Engineering, Vulnerability Management, and Incident Response teams. • Performs other job-related duties as assigned.

• Investigate, triage, analyze, contain, eradicate, and support recovery activities for cybersecurity incidents across enterprise and cloud environments. • Perform detailed analysis of security events generated by SIEM, EDR/XDR, IDS/IPS, cloud-native security tools, and endpoint technologies. • Collaborate with Security Operations and Splunk Detection Engineering teams to improve detection content, tune alerts, reduce false positives, and enhance detection effectiveness. • Conduct proactive threat hunting using threat intelligence, behavioral analytics, and MITRE ATT&CK techniques. • Perform root cause analysis and recommend corrective and preventive actions. • Document investigation findings, incident timelines, lessons learned, and technical reports. • Assist in developing and maintaining Incident Response playbooks, SOPs, and workflows. • Support digital evidence collection and basic forensic activities while maintaining chain of custody. • Participate in security assessments, architecture reviews, tabletop exercises, phishing simulations, and readiness activities. • Support security reviews of IT systems, applications, and cloud services. • Assist with cybersecurity policies, standards, and operational procedures. • Collaborate with Cloud Security, Vulnerability Management, Infrastructure, and Application teams. • Monitor incident metrics and contribute to operational reporting. • Stay current on emerging threats and industry best practices. • Performs other job-related duties as assigned.

Role Description This position requires an active Public Trust clearance. - Perform data acquisition, validation, analysis, and reporting of key areas company wide. - Develop, test, and implement processes to automate analysis and risk identification. - Leverage technology to identify areas for process efficiency improvements while providing insights and recommendations. Responsibilities - Provides management of studies, analysis, response preparation, meeting support and policy development for Health Services Policy and Oversight (HSP&O). - Provides direct Senior Subject Matter Expert (SME) and Expert Writing support services to the Acting Principal Deputy Assistant Secretary of Defense for Health Affairs (HA) and the Deputy Assistant Secretary of Defense for HSP&O. - Engages and communicates (written and verbally) with senior executive leaders within the MHS governance structure on a regular basis; produce senior executive level correspondence using Microsoft Office Suite. - Provides direct support to key government leaders for task execution and management including scheduling meetings, coordinating travel, logistics, preparing agendas and meeting minutes, tracking action items and due outs, collecting and preparing read-ahead, developing executive action/decision packages, as well as action memos, memorandums of support or agreement, standard operating procedures or manuals, and/or DoD or HA/DHA issuances. - Coordinates and manages project tasks to ensure project delivery within allotted timelines. - Develops high-level performance-based analytical reports to provide recommendations on program effectiveness and support to research and responses to government officials. - Provides research, analytical and administrative support to include ongoing evidence-based analytical, research and evaluation methods and outcomes research. - Provides support in the development of HSP&O oversight structure, to include risk assessment, prioritization of programs for oversight, and developing clear milestones and metrics for oversight. - Assists in collection, summarization, analysis, or reporting of Office of Assistant Secretary of Defense (OASD) HA/HSP&O health policy needs, goals, objectives, initiatives, and plans, program evaluation and reporting data. - Provides support to directors to oversee policy implementation; ensure programs are consistently implemented; and to conduct assurance activities and investigations. - Performs other job-related duties as assigned. Qualifications - Bachelors’ degree is required; Healthcare related field is highly preferred. - Preference will be given to candidates with healthcare or health policy related experience. - Five or more years of experience in healthcare administration or operations supporting the Defense Health Agency or one of the 3 Military Medicine Higher Headquarters. - Working knowledge of Health Policy is required. - Skilled in Enterprise Task Management Software Solution (ETMS2) or similar task tracking program preferred. - Demonstrated ability to conduct effective technical presentations to client management and professional/tactful coordination with a variety of project stakeholders. - Ability to provide risk assessment, prioritization of programs, milestones, and metrics. - Ability to collect, summarize and provide analysis of health policy needs, goals, objectives, initiatives, and plans, program evaluation and reporting data. - Ability to assess program effectiveness, health policy, and current and potential organizational structure to improve operational efficiencies and processes. - Ability to handle multiple policies and programs under HSP&O responsibility. - Skill in overseeing policy implementation; ensure programs are implemented consistently and assurance activities and investigations are conducted. - Ability to multitask and meet aggressive deadlines. - Excellent communication skills, both oral and written. - Ability to support high-level meetings to include scheduling/coordination and preparing associated documents. - Ability to work independently in a fast-paced environment. - Strong quantitative analysis and critical thinking skills. - Must pass pre-employment qualifications of Cherokee Federal. Compensation & Benefits - Estimated Starting Salary Range: $70,000-85,000 (Pay commensurate with experience). - Full time benefits include Medical, Dental, Vision, 401K, and other possible benefits as provided. - Benefits are subject to change with or without notice. Company Description Cherokee Nation Defense Solutions (CNDS) is a part of Cherokee Federal – the division of tribally owned federal contracting companies owned by Cherokee Nation Businesses. As a trusted partner for more than 60 federal clients, Cherokee Federal LLCs are focused on building a brighter future, solving complex challenges, and serving the government’s mission with compassion and heart.

Role Description Criterion Systems, LLC (CS) is seeking a highly skilled Cloud Vulnerability Response Specialist to support enterprise cybersecurity initiatives focused on securing cloud-based environments. This position is responsible for identifying, analyzing, and mitigating vulnerabilities across cloud infrastructure while supporting incident response, risk management, and continuous security improvement efforts. The ideal candidate will possess deep expertise in cloud security technologies, vulnerability management, and cloud risk assessment methodologies. Compensation & Benefits - Estimated Salary: $145,000-$150,000 - Pay commensurate with experience, qualifications, certifications, and overall fit for the position. - Eligible employees may receive a comprehensive benefits package that may include: - Medical, Dental, and Vision Insurance - 401(k) Retirement Plan - Paid Time Off and Holidays - Professional Development Opportunities - Additional company-sponsored benefits - Benefits are subject to change based on company policy. Key Responsibilities - Identify, analyze, and mitigate vulnerabilities in cloud-based systems utilizing advanced cloud security expertise. - Monitor cloud environments for security breaches and respond to security incidents to minimize operational and business impact. - Conduct security assessments and vulnerability analyses to strengthen cloud security posture. - Develop, implement, and maintain security protocols, standards, and procedures for cloud-based environments. - Perform gap analyses to identify weaknesses in existing cloud security controls and risk management processes. - Design and implement risk management programs that enhance protection of cloud assets. - Utilize and optimize cloud security tools to detect, prevent, and respond to threats. - Collaborate with technical and business stakeholders to ensure security controls align with organizational objectives and industry best practices. - Provide subject matter expertise on cloud security policies, standards, and procedures. - Stay current on emerging threats, vulnerabilities, technologies, and security trends to continuously improve cloud defense capabilities. Qualifications - Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related technical discipline preferred. - Minimum of eight (8) years of cybersecurity experience. - At least three (3) years of experience focused on cloud security and vulnerability management. - Demonstrated experience supporting security incident response and vulnerability remediation efforts in cloud environments. - Experience implementing and maintaining cloud security controls and risk management programs. - Strong understanding of cloud infrastructure platforms, including: - Amazon Web Services (AWS) - Microsoft Azure - Google Cloud Platform (GCP) - Experience with cloud security tools such as: - AWS GuardDuty - Prisma Cloud - Knowledge of cloud-native security technologies and SIEM solutions. - Experience conducting security assessments, vulnerability analysis, and remediation planning. - Understanding of risk management frameworks and compliance standards, including: - NIST - ISO 27001 - Strong analytical, troubleshooting, and problem-solving abilities. - Excellent written and verbal communication skills with the ability to communicate technical concepts to non-technical audiences. Preferred Certifications - AWS Certified Security – Specialty - Microsoft Certified: Azure Security Engineer Associate - Certified Information Systems Security Professional (CISSP) - Other relevant cloud security certifications preferred. Similar Searchable Job Titles - Cloud Security Engineer - Cloud Security Analyst - Vulnerability Management Specialist - Cloud Cybersecurity Engineer - Cloud Risk Management Analyst Keywords - Cloud Security - Vulnerability Management - Incident Response - Risk Management - AWS - Azure - Google Cloud Platform - Security Assessments - Cybersecurity - Cloud Infrastructure - Cloud Monitoring - Threat Detection - SIEM - Compliance - NIST - ISO 27001

• Provide support to the MARAD Information Assurance Program for operations, business and administrative in support of the System Authorization Process and deliverables. • Direct involvement with MARAD Program Office and the Information System Security Manager (ISSM) on cybersecurity and authority to operate (ATO) matters. • Manage MARAD’s Information System’s core documentation, in accordance with each phase of the system engineering process / System Development Life Cycle (SDLC). • Support creation/update of FIPS 199 Security Categorization document; ensure information type(s) and special considerations (if applicable) are defined. • Support creation/update security control selection listing. • Support creation/update System Security Plan (SSP). • Assist in security incident response, risk mitigation, and compliance reporting.

Role Description The Senior Salesforce Developer designs, develops, and implements complex Salesforce solutions to support public sector and DoD environments. This role leads technical design, builds scalable Apex and Lightning-based solutions, integrates Salesforce with enterprise systems, and supports the full software development lifecycle. The Senior Developer mentors junior staff, reduces technical debt through best practices, and ensures high-quality, secure, and performant Salesforce implementations. Qualifications - Preferred public sector experience or multiple Salesforce project implementation experience. - Strong expertise in Salesforce platform and applications, with a deep understanding of Salesforce development best practices and standards. - Proficiency in Apex programming language and declarative tools, such as Flow and Omnistudio. - Salesforce certifications (e.g., Salesforce Certified Platform Developer I, Salesforce Certified Administrator) are required. - Bachelor's degree in Computer Science, Information Technology, or a related field. Requirements - Must possess an interim Secret security clearance or higher. - Must have at least 3-5 years of experience with Omniscript, Data Raptors, Integration Procedures, and Flex cards. - Shall have a minimum of twelve (12) years of general work experience. - Candidate must also demonstrate experience supporting Salesforce platform(s) within Department of Defense (DoD) environments. - Shall have three (3) years of experience developing Lightning Web Components and Visualforce pages. - Shall have experience with full-stack engineering, including three (3) years experience deploying Salesforce production enterprise applications. - U.S. Citizenship is required. Benefits - Estimated Starting Salary Range: $120,000 - $160,000 - Pay commensurate with experience. - Full-time benefits include Medical, Dental, Vision, 401K, and other possible benefits as provided. - Benefits are subject to change with or without notice. Company Description Criterion is a part of Cherokee Federal – the division of tribally owned federal contracting companies owned by Cherokee Nation Businesses. As a trusted partner for more than 60 federal clients, Cherokee Federal LLCs are focused on building a brighter future, solving complex challenges, and serving the government’s mission with compassion and heart.

• Assess MARAD systems in one of three states: System Authorization: Initial Authorization, Reauthorization, or Continuous Monitoring Assessment (CMA) • Provide annual assessment support to the NSMV and MARAD CIO programs • Conduct independent assessments of specified MARAD information systems • Review existing information system core documentation • Provides identification of non-compliance of security requirements • Validates the security requirements of the information system • Verify and validate that the system meets the security requirements • Execute and conduct analysis of network and systems • Develop security assessment plans and assessment reports • Develop Security Assessment Plan (SAP) • Adhere to the approved SAP • Develop security assessment report (SAR) • Develop / update system qualitative risk assessment reports (RAR) • Develop recommendation report aiding in Plan of Action and Milestone (POA&M) development • Develop security assessment executive summary documents • Enter assessment data the Cyber Security Assessment and Management (CSAM) database • Provide presentations, reports, evaluations, reviews, meeting minutes and working papers as requested • Apply MARAD/DOT A&A guidance and policy • Actively work with the designated Information Systems Security Manager ISSM • Performs other job-related duties as assigned

• Develop, maintain, and monitor project budgets from award through closeout. • Track actual costs against budgets and commitments. • Perform detailed cost variance analysis and identify root causes. • Maintain cost codes and ensure accurate cost allocation. • Analyze labor productivity, equipment utilization, subcontractor costs, and material expenditures. • Monitor project contingency and management reserve utilization. • Prepare monthly Estimate at Completion (EAC) and Estimate to Complete (ETC). • Forecast labor hours, material costs, subcontract costs, equipment costs, and indirect expenses. • Evaluate financial impacts of schedule delays and scope changes. • Provide accurate cash flow forecasts. • Prepare weekly and monthly executive cost reports. • Develop dashboards highlighting: Budget vs Actual, Committed Cost, Forecast Cost, Cost Performance Index (CPI), Schedule Performance Index (SPI), Productivity Metrics, Cost Trends. • Present financial performance to project leadership. • Review change orders for financial impact. • Support pricing and negotiations of client and subcontractor change orders. • Track pending changes and potential exposure. • Ensure all approved changes are incorporated into project budgets and forecasts. • Identify cost risks and opportunities. • Perform quantitative financial analysis. • Recommend mitigation strategies. • Support project risk registers. • Support Earned Value Management (EVM) where applicable. • Coordinate with Scheduling regarding progress measurement. • Validate percent complete calculations. • Analyze schedule impacts on project costs. • Monitor purchase orders and subcontract commitments. • Review contract values versus committed expenditures. • Assist with procurement forecasting. • Track material escalation and supply chain impacts. • Review monthly accruals. • Support invoice validation. • Assist with revenue recognition. • Reconcile project financial data between ERP systems and project controls software. • Mentor junior cost analysts. • Develop standardized reporting processes. • Improve cost control procedures and best practices. • Participate in project financial reviews with executive leadership.

Role Description The Salesforce Developer designs, builds, and configures Salesforce solutions that support mission-critical public sector environments. This role involves: - Developing custom applications using Apex and Visualforce. - Building responsive front-end experiences with Angular JS, HTML5, and CSS. - Configuring CRM systems to meet business needs. - Creating product extensions and native applications on the Force.com platform. - Supporting system integrations. - Modernizing legacy community portals by migrating them from Aura to Lightning. Qualifications - Bachelor's degree in Computer Science, Information Systems, Engineering, or Business Management. - Four (4) years of experience developing with front-end web technologies, including Angular JS, HTML5, and CSS. - Four to six (4-6) years of experience in Salesforce configuration and implementing CRM systems. - Experience executing declarative Salesforce application configuration. - Experience using Apex and Visualforce to create unique, customer-based solutions. - Experience building Salesforce.com product extensions using Visualforce technology. - Experience developing new native products on the Force.com platform. - Experience performing manual integrations. - Experience rebuilding community portals from Aura to Lightning. - Bonus: experience or familiarity with Conga. - U.S. Citizenship is required. - Must pass pre-employment qualifications of Cherokee Federal. Requirements - Execute declarative Salesforce application configuration to meet business requirements. - Troubleshoot, test, and debug Salesforce applications to ensure quality and performance. - Collaborate with business analysts, stakeholders, and development teams to translate requirements into working solutions. Benefits - Estimated Starting Salary Range: $100,000 - $130,000 (Pay commensurate with experience). - Full-time benefits include Medical, Dental, Vision, 401K, and other possible benefits as provided. - Benefits are subject to change with or without notice.

• Provide direct administrative support for providers (as applicable): scheduling coordination, document routing, onboarding support, task follow-up, and issue resolution. • Coordinate travel for staff and providers, including authorizations, itinerary support, changes/cancellations, and compliance with program travel policies. • Support expense report completion and compliance using Concur (and/or customer-required tools); troubleshoot common issues and escalate when needed. • Train and coach new and existing staff on Cherokee systems and standard processes, including Deltek timekeeping/expense (as applicable), Concur, and CNB Connect. • Hold recurring “office hours” (virtual and/or on-site) to provide hands-on support for timecards, expense reports, profile setup, password/access issues, and basic system navigation. • Develop quick-reference guides and job aids for common processes (time entry, expense submission, travel rules, onboarding steps). • Maintain trackers and status reporting (staff onboarding progress, travel status, open actions, training completion) using Excel, Smartsheet and any other tools used by the team. • Coordinate with HR, Recruiting, Finance, Security/Credentialing, and Program Leadership to ensure smooth onboarding and compliance. • Support meeting logistics: agendas, minutes, action items, distribution lists, and follow-ups. • Maintain accurate, audit-ready records; protect PII and follow all government and company security/privacy procedures. • Performs other job-related duties as assigned.