Information Assurance & Security Analyst
Core
Monitor, assess, and maintain continuous compliance with DoD, DLA, and RMF security requirements across cloud and on-premises environments.
Role type
Senior Information Assurance & Security Analyst
Builds
Security posture, compliance artifacts, and secure application environments for DoD/DLA
Domain
Defense contracting / Cybersecurity compliance
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
STIGs, RMF documentation, SCAP, ACAS scans, vulnerability assessment, OS hardening, patch management, Oracle database security, Java/J2EE security, security documentation, POA&Ms, audit coordination
Preferred skills
CISSP, CISM, CASP+, DHS Trusted Tester, cloud security (AWS), hybrid cloud RMF, large-scale web application security, security training development
Technologies
AWS, DevSecOps, Java, Network, Oracle, Web, microservices, Java EE
Responsibilities
Run continuous monitoring activities including vulnerability identification, risk assessment, and remediation tracking; perform ACAS scanning, CVA assessments, and CCRI preparation; prepare and maintain RMF artifacts like SSPs and POA&Ms; support audit readiness and coordinate with security teams; participate in configuration and change management for security impact evaluation; assist with security incident response and root cause analysis; embed with Agile/DevSecOps teams for security input; support application security testing and DevSecOps pipeline activities; develop and deliver security training materials; support R&D and modernization efforts for application security
Seniority
Senior, hands-on IC