information assurance analyst

General Dynamics Information Technology

<p></p><div><div><div><p>Your Impact</p><p>
Own your opportunity to support our nation's defense. Make an impact by connecting and securing critical operations across the globe, keeping our country safe and secure.</p><p>
Job Description</p><div><p>
Information Assurance Technician II CLC 16</p><p>
Transform technology into opportunity as an Information Assurance Technician II with GDIT. A career in enterprise IT means connecting and enhancing the systems that matter most. At GDIT you&rsquo;ll be at the forefront of innovation and play a meaningful part in improving how agencies operate.</p><p>
At GDIT, people are our differentiator. As an Information Assurance Technician II you will help ensure today is safe and tomorrow is smarter. Our work depends on IA Technician IIs joining our team to ensure the safety of information systems assets.</p><p>
HOW AN INFORMATION ASSURANCE TECHNICIAN II WILL MAKE AN IMPACT</p><ul><li>Performs all procedures necessary to ensure the safety of information systems assets and to protect systems from intentional or inadvertent access or destruction</li><li>Monitor, evaluate, and maintain systems and procedures to safeguard internal information systems, network, databases, and Web-based security</li><li>Assists with implementation of countermeasures or mitigating controls</li><li>Ensures the integrity and protection of networks, systems, and applications by technical enforcement of organizational security policies, through monitoring of vulnerability scanning devices</li><li>Performs periodic and on-demand system audits and vulnerability assessments, including user accounts, application access, file system and external Web integrity scans to determine compliance</li><li>Safeguards the network against unauthorized infiltration, modification, destruction, or disclosure</li></ul><p>
WHAT YOU&rsquo;LL NEED TO SUCCEED:</p><ul><li>Certification: CISSP</li><li>Required Experience: 2 years of related experience</li><li>Required Technical Skills: (see below)</li><li>Security Clearance Level: Top Secret</li><li>Required Skills and Abilities: (see below)</li><li>Location: On Customer Site</li><li>US Citizenship Required - secret</li></ul><p></p><p>
EDUCATION AND EXPERIENCE: Technical Training, Certification(s) or Degree, 1+ years of experience</p><p>
CERTIFICATIONS:</p><p>
Must meet the certification requirement of DoW 8570.01-M or otherwise stated in SPIN-C or individual task order. The contractor is expected to have, but is not limited to, one or more IT certifications from each group:</p><p>
Group 1: Information Technology Certification Requirements</p><p></p><ul><li>Microsoft Certified Solutions Expert (MCSE) &ndash; Microsoft Exchange/Windows Server or equivalent</li><li>Cisco Certified Network Associate</li><li>Cisco Certified Network Professional (CCNP)</li><li>CompTIA Linux +</li><li>Linux Professional Institute Certification (LPIC)</li><li>Red Hat Certified Engineer (RHCE)</li></ul><p>
Group 2: IA Technology Certification Requirements</p><ul><li>GIAC Certified Perimeter Protection Analyst (GPPA)</li><li>GIAC Certified Intrusion Analyst (GCIA)</li><li>GIAC Certified Windows Security Administrator (GCWN)</li><li>GIAC Certified UNIX Security Administrator (GCUX)</li><li>GIAC Systems and Network Auditor (GSNA)</li><li>GIAC IT Security Audit Essentials (GSAE)</li><li>GIAC Global Industrial Cyber Security Professional (GICSP)</li><li>GIAC Certified Incident Handler (GCIH)</li></ul><p>
Group 3: IAT Level II Requirements</p><ul><li>Global Information Assurance Certification (GIAC) Security Essentials Certification (GSEC)</li><li>CompTIA Security +</li><li>Security Certified Network Professional (SCNP)</li><li>Systems Security, Certified Practitioner (SSCP)</li><li>Certified Information Security Auditor (CISA)</li><li>GIAC Security Expert (GSE)</li></ul><p>
Security Certified Network Architect (SCNA)</p><ul><li>Certified Information System Security Professional (CISSP) or Associate</li><li>Certification and Accreditation Professional (CAP)</li><li>GIAC Information Security Fundamentals (GISF)</li><li>GIAC Security Leadership Certification (GSLC)</li><li>Certified Information Security Manager (CISM)</li></ul><p>
GENERAL EXPERIENCE:</p><p>
Intermediate level of experience in design, maintenance, and operation of small to medium networks. This experience must include administrating corporate or business&rsquo; user accounts managing mail servers, printer servers, WWW servers, and/or firewalls. Must have experience in reviewing and recommending software applications as well as identifying hardware salient characteristics and any add on devices. Experience in systems management, monitoring and sustainment; hardware repair for servers, PCs, peripheral equipment; software installation, maintenance and sustainment.</p><p>
SPECIALIZED EXPERIENCE:</p><p>
Must have intermediate level of experience working with the following:</p><ul><li>Tactical and strategic security issues of systems and networks, and associated requirements specific to deployed architecture</li><li>Network security, network and systems intrusion detections, advanced devices, firewalls, and software specific to the Department of War</li><li>Server operations including installation, configuration, optimization, and analyzing logs on Windows operating systems (including Server 2008/2012 and modern desktop versions)</li><li>Cisco IOS, CAT OS, configuration of Cisco routers and switches</li><li>Server operations including installation, configuration, optimization, and analyzing logs on Unix operating systems (including Linux and Solaris)</li><li>Mastery of the functions of DoW 8570-defined IAT Level I position</li></ul><p></p><p>
GDIT IS YOUR PLACE:</p><ul><li>401K with company match</li><li>Comprehensive health and wellness packages</li><li>Internal mobility team dedicated to helping you own your career</li><li>Professional growth opportunities including paid education &amp; certifications</li><li>Cutting-edge technology you can learn from</li><li>Rest and recharge with paid vacation and holidays</li></ul><p>
#DefenseOCONUS</p>
</div></div><div><div><div><p>Work Requirements</p></div></div><div></div><div><div>
Years of Experience<div>
2 + years of related experience</div><ul><li>may vary based on technical training, certification(s), <i>or</i> degree</li></ul></div><div></div><div>
Certification<p>
Certified Authorization Professional (CAP) | International Information System Security Certification Consortium (ISC2) - International Information System Security Certification Consortium (ISC2)</p></div><div></div><div>
Travel Required<div>
Less than 10%</div></div><div></div><div>
Citizenship<div>
U.S. Citizenship Required</div></div></div></div></div><div><p>
Salary and Benefit Information</p><div>
The likely hourly rate for this position is between $39.11 - $0.00. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range. Total compensation for international positions varies by tax, social security, and immigration statuses, as well as location. Generally, an international assignment may include allowances, premium uplifts, and/or relocation or transportation benefits, above base salary range noted.<br>
View information about benefits and our total rewards program.</div><p>
About Our Work</p><div>
We are GDIT. A global technology and professional services company that delivers technology and mission services to every major agency across the U.S. government, defense and intelligence community. Our 30,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across over 50 countries worldwide, offering leading capabilities in digital modernization, AI/ML, cloud, cyber and application development. Together with our customers, we strive to create a safer, smarter world by harnessing the power of deep expertise and advanced technology.</div><div>
Join our Talent Community to stay up to date on our career opportunities and events at gdit.com/tc.</div><div><i>
Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans</i></div></div></div>

Information Assurance II

TRISTAR

<div>Description:
<p>
We are seeking a highly motivated Cybersecurity / Information Assurance (IA) Specialist to support systems in achieving and maintaining cybersecurity compliance and Authorization to Operate (ATO). The ideal candidate will have experience working within the Risk Management Framework (RMF) and supporting enterprise-level cybersecurity compliance efforts. <b>This is a Hybrid position. </b>Occasional travel to Crane, IN as needed. #LI-remote</p><p><b>
Key Responsibilities</b></p><ul><li>
Provide Information Assurance (IA) and cybersecurity support to ensure compliance with DoW cybersecurity policies and standards.</li><li>
Support the development, submission, and maintenance of ATO packages within the Enterprise Mission Assurance Support Service (eMASS).</li><li>
Create, update, and manage IA artifacts required for: Initial system authorization, Continuous monitoring, and System reauthorization / re-accreditation.</li><li>
Implement cybersecurity processes aligned with the Risk Management Framework (RMF), including: Security control identification and assessment, Control implementation documentation, and Authorization package support.</li><li>
Develop and maintain Plan of Actions and Milestones (POA&amp;M) to track vulnerabilities and mitigation strategies.</li><li>
Coordinate with system stakeholders to track remediation efforts and ensure timely closure of findings.</li><li>
Identify, track, and remediate vulnerabilities in accordance with: Information Assurance Vulnerability Alerts (IAVAs) and Operational Directives (OPDIRs).</li><li>
Perform vulnerability scanning and compliance validation using Assured Compliance Assessment Solution (ACAS).</li><li>
Assess and document system compliance with Security Technical Implementation Guides (STIGs).</li><li>
Utilize STIG checklists and Security Content Automation Protocol (SCAP) tools for validation.</li><li>
Develop and maintain system security documentation, including: System management procedures, Standard operating procedures (SOPs), and Cybersecurity process documentation.</li><li>
Support Annual Security Reviews (ASRs) and assist in Verification and Validation (V&amp;V) activities.</li><li>
Collaborate with Government and contractor personnel to ensure systems maintain continuous ATO compliance.</li></ul>
Requirements:
<ul><li>Experience supporting cybersecurity efforts within DoD or federal environments.</li><li>
Strong knowledge of: Risk Management Framework (RMF), eMASS, and ATO processes and lifecycle management.</li><li>
Experience with vulnerability management and remediation tracking.</li><li>
Familiarity with ACAS, STIGs, and SCAP compliance tools.</li><li>
Ability to create and maintain detailed cybersecurity documentation.</li><li>
Strong communication and coordination skills across technical and non-technical stakeholders.</li><li>
Prior experience supporting system accreditation and continuous monitoring activities.</li><li>
Must be a U.S. Citizen.</li><li>
Must be able to obtain and maintain a Secret Security Clearance.</li></ul><p><b>
Education</b></p><ul><li>
Bachelor&rsquo;s degree in Cybersecurity, Information Technology, Computer Science, or related field (or equivalent experience).</li><li>
Must have or be able to obtain a CompTIA Security Plus certification prior to start date.</li></ul><p></p><p><b><br>
About TRISTAR</b></p><p>
TRISTAR is an SBA certified Service-Disabled Veteran-Owned professional services company supporting the U.S. Department of Defense programs. Our core competencies include Electronic Warfare, Enterprise Management, Full Spectrum Cybersecurity, Information Technology, Digital Transformation, Software Engineering and Development, Maritime Modernization and Engineering, and Technical Solutions.</p><p>
TRISTAR was founded in March 1995 and has built an employee-focused collaborative environment which enables our team of professionals to create and deliver customized solutions to meet our customers&rsquo; mission critical challenges. TRISTAR&rsquo;s core capabilities support customers with end-to-end solutions.</p><p>
For over 30 years, TRISTAR has demonstrated and perfected our ability to successfully manage any task, small or large no matter how difficult or complex.</p><p>
TRISTAR is proud to serve the Department of Defense and other Federal Agencies.</p><p>
TRISTAR provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.</p></div>

Information Assurance Specialist

Leidos

<div><p><b>Description</b>
</p><p>The mission of the DHS Chief Information Security Officer Directorate (DHS CISOD) is to support the Department&rsquo;s implementation of all applicable regulatory requirements including the Federal Information Security Modernization Act of 2014 (FISMA), relevant Office of Management and Budget (OMB) Circulars, Executive Orders, Federal laws, directives, policies, and regulations. The DHS CISOD&rsquo;s mission is to also provide the Department of Homeland Security (DHS) a secure and trusted computing environment. The DHS CISOD assists in ensuring Department compliance with information security requirements. Information security is an essential business function, critical to enabling DHS to conduct its operations and deliver service to the public.</p><p>
Leidos is seeking an experienced <b>IV&amp;V Senior Analyst</b> to support DHS CISOD in ensuring DHS-wide compliance with federal information security laws, regulations, mandates, and standards. The selected candidate will perform independent verification and validation activities over Component validation and remediation efforts, provide detailed analysis of security documentation and control implementations, and deliver actionable recommendations to support risk-informed decision making across the enterprise.</p><p></p><p>
The IV&amp;V Senior Analyst will serve as a subject matter expert in cybersecurity compliance and control validation, working closely with DHS Components and government stakeholders to assess remediation packages, evaluate security documentation, monitor corrective actions, and help ensure the quality, consistency, and timeliness of IV&amp;V support provided to CISOD. This role requires strong familiarity with DHS cybersecurity processes, Risk Management Framework (RMF) requirements, and federal security guidance, as well as the ability to communicate technical findings clearly to both technical and non-technical audiences.</p><p></p><p><b>
Primary Responsibilities:</b></p><ul><li><p>
Perform IV&amp;V testing and analysis over Component V&amp;V packages for remediated IT security controls, including review of supporting evidence, validation of testing adequacy, and identification of gaps or inconsistencies.</p></li><li><p>
Review Component-submitted remediation and validation documentation to determine compliance with DHS and federal cybersecurity requirements and provide clear, risk-based feedback.</p></li><li><p>
Track submitted V&amp;V packages through review and approval workflows, including coordination of CISOD and OCFO signatures and status updates for reporting purposes.</p></li><li><p>
Evaluate System Security Plans (SSPs), security authorization artifacts, and other system documentation to determine whether required controls have been properly implemented and documented across applicable system layers.</p></li><li><p>
Assist in performing Security Authorization Reviews for CFO-designated and ancillary systems, including analysis of control implementation statements, observations, and documentation sufficiency.</p></li><li><p>
Review Component IT commitment letters, provide comments, and monitor testing and passing status against stated commitments.</p></li><li><p>
Develop, maintain, and improve QA processes, checklists, traceability matrices, and standard guidance documents to enhance consistency and repeatability across IV&amp;V activities.</p></li><li><p>
Provide measurable data, status updates, and reporting inputs that support monthly IT audit reporting and executive-level visibility into remediation and compliance trends.</p></li><li><p>
Coordinate with government and contractor stakeholders to resolve issues, clarify findings, and improve the quality of Component submissions.</p></li><li><p>
Contribute to process improvements, GRC updates, and standardization efforts related to assessments, authorizations, and remediation validation activities.</p></li><li><p>
May provide guidance and mentoring to junior staff and support internal quality reviews as needed.</p></li></ul><p></p><p><b>
Primary Qualifications:</b></p><ul><li><p><b>
Must be able to obtain a DHS Security Clearance.</b></p></li><li><p>
Bachelor&rsquo;s degree and 8+ years of experience in IV&amp;V, cybersecurity compliance, RMF, security controls assessment, or a related information assurance/cybersecurity field; or Master&rsquo;s degree and 6+ years of relevant experience.</p></li><li><p>
Experience supporting DHS or other Federal cybersecurity compliance and assessment activities.</p></li><li><p>
Strong knowledge of NIST RMF, FISMA, FedRAMP, FIPS, NIST guidance, and applicable OMB and DHS cybersecurity policies and procedures.</p></li><li><p>
Experience reviewing security authorization documentation, remediation packages, SSPs, and control validation evidence.</p></li><li><p>
Ability to analyze technical documentation, identify compliance gaps, and provide practical, risk-based recommendations.</p></li><li><p>
Experience developing reports, metrics, and written products for government stakeholders.</p></li><li><p>
Strong written and verbal communication skills and the ability to work effectively in a collaborative, fast-paced environment.</p></li></ul><p>
If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo &mdash; because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 &mdash; and moving faster than anyone else dares.</p><h2 class="jobSectionHeader"><b>
Original Posting:</b></h2>
April 10, 2026<p></p><p><br>
For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.</p><p></p><h2 class="jobSectionHeader"><b><br>
Pay Range:</b></h2>
Pay Range $92,300.00 - $166,850.00<p></p><p>
The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.</p><p></p><p><b>
About Leidos</b></p><p></p><p>
Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit www.Leidos.com.</p><p></p><p><b>
Pay and Benefits</b></p><p></p><p>
Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at www.leidos.com/careers/pay-benefits.</p><p></p><p><b>
Securing Your Data</b></p><p></p><p>
Beware of fake employment opportunities using Leidos&rsquo; name. Leidos will never ask you to provide payment-related information during any part of the employment application process (i.e., ask you for money), nor will Leidos ever advance money as part of the hiring process (i.e., send you a check or money order before doing any work). Further, Leidos will only communicate with you through emails that are generated by the Leidos.com automated system &ndash; never from free commercial services (e.g., Gmail, Yahoo, Hotmail) or via WhatsApp, Telegram, etc. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at LeidosCareersFraud@leidos.com.</p><p>
If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission.</p><p></p><p><b>
Commitment to Non-Discrimination</b></p><p></p><p>
All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.</p></div>

IV&V Senior Analyst

TISTA Science and Technology Corporation

<div>Overview:
<div>
TISTA is seeking an experienced <b>Senior Information Security Policy Analyst</b> to join our team that has a strong background in Policy for IT Security and Privacy.</div><div></div><div><br>
At TISTA, you&rsquo;ll do meaningful, mission‑driven work that improves lives alongside teammates you trust and leaders who are transparent and supportive. We invest in your learning and internal mobility so you can build a career that keeps advancing. We&rsquo;re proud to serve and hire Veterans, and we put people first in everything we do.</div><div></div><div><b><br>
TISTA </b>associates enjoy above Industry Healthcare Benefits, Remote Working Options, Paid Time Off, Training/Certification opportunities, Healthcare Savings Account &amp; Flexible Savings Account, Paid Life Insurance, Short-term &amp; Long-term Disability, 401K Match, Professional development reimbursement, Employee Assistance Program, Paid Holidays, Military Leave, and much more!</div>
Responsibilities:
<ul><li>Experience in technical writing, specific to security-related documents, policies and procedures.</li><li>
Develop, update, and implement DISC security directives, policies, procedures and plans to support DISC Authority to Operate (ATO).</li><li>
Perform gap analysis of existing policies and procedures.</li><li>
Develop, update, and implement DISC security directives, policies, and procedures to support cloud working group and cloud migrations.</li><li>
Assist in the development and implementation of Departmental Regulations with CPOC.</li><li>
Coordinate with system owners to develop Business Impact Analysis (BIAs).</li><li>
Assist in Disaster Recovery (DR), Business Continuity (BC) &amp; Continuity of Operations (COOP) documentation and activities.</li><li>
Demonstrate strong knowledge of migrating and securing IT systems in the cloud.</li><li>
Experience with High Value Assets (HVA) systems and their security controls.</li><li>
Experience with Privacy related policy and compliance.</li><li>
Experience with developing risk impact assessments and risk mitigation strategies.</li><li>
Strong project management skills and familiarity with standard project management methodologies such as Agile and Scrum.</li><li>
Comfortable leading meetings.</li><li>
Strong familiarity with NIST Special Publications and guidance, specifically 800-53 rev. 4/rev. 5 and the NIST Risk Management Framework.</li><li>
Strong problem solving and analysis skills, self-motivated, leader and able to work and communicate in a team environment.</li></ul>
Qualifications:
<ul><li>A minimum of 5-7 years of demonstrated experience in the Information Security (Cybersecurity or Information Assurance) field.</li><li>
Experience with leading and directing the work of others.</li><li>
Demonstrates proficiency with developing, maintaining and managing Authorizations and Assessments (A&amp;A) and Authority to Operate (ATO) packages.</li><li>
Knowledge of standard concepts, practices, and procedures within program management.</li><li>
Demonstrates proficiency in IT systems cloud migrations and securing systems in the cloud.</li><li>
A holistic understanding and knowledge of the Risk Management Framework (RMF) as defined by National Institute of Technology (NIST) Special Publication (SP) 800-53 (current revision), Recommended Security Controls for Federal Information Systems and NIST SP 800-53A Revision 4, Guide for Assessing the Security Controls in Federal Information Systems.</li><li>
Strong problem-solving and analysis skills, self-motivated, and able to work and communicate in a team environment.</li><li>
Excellent documentation skills &ndash; redacted samples may be requested.</li><li>
Excellent oral and written communication skills.</li></ul><div><b>
Desired Certifications</b>:</div><ul><li>
Security+</li><li>
Certified Authorization Professional (CAP)</li><li>
Certified in Governance, Risk and Compliance (CGRC)</li><li>
Certified Information Privacy Professional (CIPP)</li><li>
Cloud Certification (Azure, AWS, CCSP, Cloud+, etc.)</li><li>
Certified Information System Security Professional (CISSP)</li><li>
Certified Cloud Security Professional (CCSP)</li><li>
Project Management Professional (PMP)</li></ul><div><b>
Education:</b></div><ul><li>
Bachelor&rsquo;s degree or higher in computer science, Information Technology, Information Security, or similar fields.</li></ul><div><b>
Clearance:</b></div><ul><li>
The ability to pass a Public Trust Background Investigation.
</li><li>US citizens or permanent residents highly preferred.</li></ul><div><b>
Location:</b></div><ul><li>
Remote, USA.</li></ul><div><b>
Pay Range:</b></div><ul><li>
The pay for this position ranges from $85,730 to $95,500.</li><li>
The actual salary offer will carefully consider a wide range of factors, including your skills, qualifications, experience, and location.</li><li>
Also, certain positions are eligible for additional forms of compensation, such as bonuses.</li><li>
TISTA associates are eligible to participate in our comprehensive benefits plan! More information can be found here: https://tistatech.com/working-at-tista/</li></ul></div>

Senior Information Security Policy Analyst

KaiHonua LLC

<div>Overview:<div></div><div><br>
Position Title: Information Assurance Engineer III</div><div>
Work Location: Austin, TX</div><div></div><div><b><br>
Job Summary</b></div><div></div><div><br>
KaiHonua, LLC has an immediate opening for an Information Assurance (IA) Engineer to join our rapidly growing team. IA Engineer applies IT security principles, methods, and security products to protect and maintain the availability, integrity, confidentiality, and accountability of information system resources and processed information; plans, implements, and manages a Defense In Depth for the total network and/or enclaves within the network; identifies and analyzes threats and vulnerabilities to the information systems to maintain protection, accomplish risk analysis, security testing, and certification due to modifications or changes, completes computer security plans, and enforces mandatory access control techniques; manages a network security program, reporting all incidents promptly and providing corrective action to prevent further incidents; implements guidance to ensure the protection of Internet information, reduces the risks associated with automated processing of information and data, and trains all personnel in IT security awareness, as required.</div><div></div><div><b><br>
Essential Duties and Responsibilities</b>: (Not listed in order of importance; other duties may be assigned) and must be able to perform the following with minimal guidance:</div><div><ul><li><br>
Work with system owners to close IAVMs/ICVMs and open Plan of Action and Milestones (POA&amp;Ms) in a rapid fashion, in accordance with DoD instructions/directives. Review all POA&amp;MS with the Program Manager on at least a quarterly basis and update the POA&amp;Ms accordingly.</li><li>Provide Defense in Depth principles and technology in security engineering designs and implementation</li><li>Analyze existing and future systems, reviewing security architectures, and developing engineering solutions that integrate information security requirements to proactively manage information protection</li><li>Apply security risk assessment methodology to system development, including assessing and auditing network penetration testing, antivirus deployment, risk analysis</li><li>Conduct Computer Incident Response Team (CIRT) activities, including forensic analysis</li><li>Plan, implement, and manage a Defense In Depth for the total network and/or enclaves within the network to include such items as: scanning, remediation, host and network intrusion detection/prevention, firewalls, proxy servers, web cache, virus programs, vulnerability scanning, content filtering, remote dial in protection, Host Based Security Services, Directory Services, and Certification and Accreditation, DoD Instruction 5200.40, accreditation guidance and advice IAW AR 25-2 and IA Best Business Practices (BBPs). Plan, respond, investigate, and report undisclosed classified incident remediation.
</li><li>Assess and mitigate system security threats/risks throughout the program life cycle</li><li>Validate system security requirements definition and analysis and review/approve System Security Plans for enterprise-wide architectures</li><li>Maintain Agency public key infrastructure system Implement security designs in hardware, software, data and procedures</li><li>Provide support for the Department of Defense (DoD) Public Key Infrastructure (PKI) service.</li><li>Responsible for requesting, receiving, installation, and accountability of system (server) PKI certificates and providing technical support for PKI.
</li><li>Provide communications security (COMSEC) rekeying support within normal business hours or on-call, as required. Prepare and maintain secure communications devices and crypto keys. Provide Certification and Accreditation, as well as provide Automated Information System Accreditation support
</li><li>Provide Security Risk Assessment. Perform risk analysis of resources, controls, vulnerabilities, impact of losing systems&rsquo; capabilities and threats to the mission objective; provide analysis to facilitate decisions to implement security countermeasures or mitigate risk; implement countermeasures; periodically review program. Recognize possible threats and review evaluations for compliance and non-compliance.
</li><li>Other duties as assigned.</li></ul></div><br>
<div></div>
Requirements:<div></div><div><b><br>
Requirements</b></div><div></div><div><b><br>
Qualifications:</b></div><div></div><div><br>
To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill and ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.</div><div></div><div><b><br>
Education / Experience / Certifications</b></div><div></div><ul><li><br>
Bachelor&rsquo;s Degree in Computer Science, Cybersecurity, Computer Engineering, or related discipline. Comparable experience in lieu of degree may be considered.</li><li>5+ years of experience performing Information Assurance functions and using RMF IT security controls and policies</li><li>Must possess and maintain an IT I level certification IAW AR 25-2 and an IAT II certifications IAW DoD 8570.01-M</li></ul><div></div><div><b><br>
Knowledge</b></div><div></div><ul><li><br>
A track record of progressively responsible information assurance experience in one or more of the following information security areas: certification and accreditation, IA system evaluations, system security penetration testing, and IA security operations/network monitoring, Intrusion Detection Systems, Intrusion Prevention Systems, Security Information Management/Security Event Management, network mapping, vulnerability scanners, firewalls, routers and other security tools</li><li>Candidate must have at least 3 years of experience in the IT industry, and be familiar with the applicable NIST Special Publications 800-37 Revision 1, 800-53 Revision 3 or 4, and 800-53A Revision 1.</li><li>Experience and basic knowledge of networking components and various operating systems in a cloud environment, including UNIX and Microsoft is a plus.</li><li>Expertise in other Security Frameworks (ISO, NIST, COBIT, HIPAA/HITECH, etc.) and regulatory requirements is a plus</li><li>Working knowledge of public key infrastructure and encryption systems</li><li>Experience working on an information security incident response team</li><li>Familiarity with Security Technical Implementation Guides (STIG) and system security processes.</li><li>Experience working in CMMI Level 3 (or higher) environments is a plus</li></ul><div></div><div><b><br>
Physical Requirements</b></div><div></div><div><br>
Work may involve sitting or standing for extended periods of time. Position may require typing and reading from a computer screen. Must have sufficient mobility, including but not limited to bending, reaching, and kneeling to complete daily duties in a timely and efficient manner. May include lifting weight up to thirty (30) pounds as necessary.</div><div></div><div><b><br>
Benefits</b></div><div></div><ul><li><br>
Medical, dental, vision, disability, and life insurance</li><li>Flexible Spending Accounts</li><li>401(k)</li><li>PTO</li><li>Tuition reimbursement</li><li>Paid federal holidays</li></ul><div></div><div><b><br>
Security Clearance</b></div><div></div><div><br>
Position requires a DoD Secret security clearance. Must be a US citizen.</div><div></div><div><b><br>
Company Summary</b></div><div></div><div><br>
Headquartered in Hawaii, KaiHonua, LLC is a Native Hawaiian Organization (NHO) owned SBA Small Disadvantaged Business specializing in global information technology and offering professional solutions in IT Design &amp; Installation, Cybersecurity Engineering &amp; Support, Application Integration &amp; Development, Software &amp; Hardware Engineering, Network &amp; Systems Management, Information Systems Security, and Business Management Services.</div><div></div><div><br>
Leveraging over 30 years of providing IT services to the federal &amp; commercial market with projects located around the world, our team possesses innovative expertise in the development of a wide range of technology solutions. KaiHonua, LLC is an equal opportunity employer.</div><div></div><div><br>
Our service commitment is simple - &quot;Quality IT Solutions... On Time &amp; On Budget.&quot;</div><div><br>
KaiHonua, LLC reserves the right to change or modify job duties and assignments at any time. The above job description is not all encompassing. Positions functions and qualifications may vary depending on business needs.</div><div>
KaiHonua, LLC is an equal opportunity employer and does not discriminate against applicants based on race, color, creed, religion, medical condition, legally protected genetic information, national origin, sex (including pregnancy, childbirth or related medical condition), sexual orientation, gender identity and expression, age, disability, or Vietnam era, or other eligible veteran status or legally protected characteristics.</div><br>
<div></div>
Posted Salary Range: USD $75,000.00 - USD $110,000.00 /Yr.</div>

Information Assurance Engineer III

Heartland Consulting

<div>
 Heartland Consulting is hiring a
 <strong>
  Cybersecurity Analyst (Subject Matter Expert)
 </strong>
 to deliver robust Risk Management Framework (RMF) support for medical simulation systems under the DHA MST PMO. You will accelerate Certification &amp; Accreditation processes and help resolve cybersecurity compliance challenges that affect training technology fielding.
 <br/>
 <br/>
 Key Responsibilities (aligned with PWS 5.5)
 <br/>
 <br/>
 <ul>
  <li>
   Prepare and maintain RMF/A&amp;A packages, eMASS entries, STIG compliance, IAVM remediation, and vulnerability assessments.
  </li>
  <li>
   Integrate cyber requirements into acquisition documentation and support self-assessments/incident reporting.
  </li>
  <li>
   Track DoDM 8140.03 qualifications and contribute to risk registers for secure simulation capabilities.
   <br/>
   <br/>
  </li>
 </ul>
 Required Qualifications
 <br/>
 <br/>
 <ul>
  <li>
   Bachelor's degree in cybersecurity, information technology, or related field.
  </li>
  <li>
   4+ years of hands-on RMF/IA experience in DoD environments.
  </li>
  <li>
   Active IAT Level II certification (CompTIA Security+, SSCP, CCNA Security, or equivalent) per DoDM 8140.03.
  </li>
  <li>
   Eligible for CAC; able to complete DHA Privacy/HIPAA training.
   <br/>
   <br/>
  </li>
 </ul>
 Preferred Skills
 <br/>
 <br/>
 <ul>
  <li>
   Experience with medical systems, MHS GENESIS, or simulation platforms.
  </li>
  <li>
   Knowledge of cloud security or AR/VR integration.
   <br/>
   <br/>
  </li>
 </ul>
 Location &amp; Travel
 <br/>
 <br/>
 <ul>
  <li>
   Primarily telework with occasional on-site support in Falls Church, VA or Orlando, FL area.
  </li>
  <li>
   Travel: Occasional (10-20%), as needed for program reviews or training.
  </li>
 </ul>
</div>


Cybersecurity Analyst

Parsons

<div>In a world of possibilities, pursue one with endless opportunities. Imagine Next!<br>
<p></p>
At Parsons, you can imagine a career where you thrive, work with exceptional people, and be yourself. Guided by our leadership vision of valuing people, embracing agility, and fostering growth, we cultivate an innovative culture that empowers you to achieve your full potential. Unleash your talent and redefine what&rsquo;s possible.<p></p><p><b><br>
Job Description:</b></p><p>
Are you ready to make a real impact in national defense cyberspace operations? We&rsquo;re seeking a skilled cybersecurity professional to join our dynamic team supporting USCYBERCOM&rsquo;s internal command IT systems, integral components of the broader Joint Cyber Warfighting Architecture (JCWA).</p><p></p><p>
If you're passionate about cyber defense, thrive in high-stakes environments, and want to work alongside some of the brightest minds in the field&mdash;this is your opportunity to step into a pivotal role. <i>Imagine Next with Parsons...</i></p><p></p><p><b>
What You'll Be Doing:</b></p><ul><li><p>
In this role, you&rsquo;ll be at the forefront of securing mission-critical systems, helping to fortify the cyber infrastructure that underpins joint operations across the Department of Defense.</p></li><li><p>
Maintain the operational security posture of DoD information systems, ensuring compliance with RMF and related DoD, CNSSI, and NIST directives.</p></li><li><p>
Lead all phases of the Assessment &amp; Authorization (A&amp;A) process in alignment with DoDI 8510.01 and DoDI 8500.01.</p></li><li><p>
Serve as the principal advisor to the Information System Owner (ISO) regarding cybersecurity best practices and regulatory obligations.</p></li><li><p>
Review and validate System Security Plans (SSPs), security controls, and supporting artifacts for completeness and accuracy.</p></li><li><p>
Recommend and implement technical and procedural safeguards, tailored to mission objectives and emerging threats.</p></li><li><p>
Conduct system assessments and continuous monitoring activities to maintain the CIA Triad&mdash;Confidentiality, Integrity, and Availability.</p></li><li><p>
Collaborate with ISSMs and DAOs to ensure risk-based decisions support operational readiness and compliance.</p></li></ul><p></p><p><b>
What Required Skills You'll Bring:</b></p><ul><li><p>
Active TS/SCI w/ Poly required for consideration</p></li><li><p>
Bachelor&rsquo;s degree and 12+ years of experience; degree should be in Computer Science, Information Assurance, Information Security System Engineering, Cybersecurity, Engineering, or a related technical/business discipline. Experience to include 6+ of direct experience in cybersecurity or information assurance within DoD or Federal IT environments. Alternatively; Master's Degree in related discipline and 10+ years of experience.</p></li><li><p>
Certifications: active DoD 8570 IAM Level III certification, such as: CASP+ CE, CISSP (or Associate), CISM, GSLC, CCISO</p></li></ul><p></p><p><b>
Technical Competency</b>:</p><ul><li><p>
Proven understanding and application of RMF processes, including security control assessment, continuous monitoring, and system authorization.</p></li><li><p>
Preferred Skills &amp; Attributes:</p></li><li><p>
Strong written and verbal communication skills for interfacing with stakeholders at all levels.</p></li><li><p>
Demonstrated leadership and decision-making capabilities in high-visibility, security-critical environments.</p></li><li><p>
Ability to manage priorities across multiple systems and project lifecycles.</p></li><li><p>
Proficiency with tools such as eMASS, Xacta, ACAS, SCAP, and Nessus.</p></li></ul><p></p><p><b>
Security Clearance Requirement:</b></p>
An active Top Secret SCI w/Polygraph security clearance is required for this position.
<p></p>This position is part of our Federal Solutions team.<p></p>
The Federal Solutions segment delivers resources to our US government customers that ensure the success of missions around the globe. Our intelligent employees drive the state of the art as they provide services and solutions in the areas of defense, security, intelligence, infrastructure, and environmental. We promote a culture of excellence and close-knit teams that take pride in delivering, protecting, and sustaining our nation's most critical assets, from Earth to cyberspace. Throughout the company, our people are anticipating what&rsquo;s next to deliver the solutions our customers need now.<p></p>
Salary Range: $148,300.00 - $266,900.00<p></p>
We value our employees and want our employees to take care of their overall wellbeing, which is why we offer best-in-class benefits such as medical, dental, vision, paid time off, 401(k), life insurance, flexible work schedules, and holidays to fit your busy lifestyle!<p></p>
Parsons is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, veteran status or any other protected status.<p></p>
We truly invest and care about our employee&rsquo;s wellbeing and provide endless growth opportunities as the sky is the limit, so aim for the stars! Imagine next and join the Parsons quest&mdash;APPLY TODAY!<p></p><div>
Parsons is aware of fraudulent recruitment practices. To learn more about recruitment fraud and how to report it, please refer to https://www.parsons.com/fraudulent-recruitment/.</div></div>
<br><div><div><div>COMPETITIVE BENEFIT OFFERINGS</div></div><div><div><div><br>
Financial Wellness</div><div><br>
We care about your financial wellbeing. Parsons offers competitive pay and retirement plans to help you build wealth for the future while giving you the flexibility to diversify your investments.</div></div><div><div>
Work Life Harmony</div><div><br>
Balance in life is important and time away from the office is imperative to allow you to refresh and focus your attention on the things that matter to you. Parsons supports your time away by providing paid time off and paid flexible holidays.</div></div><div><div>
Career Development</div><div><br>
We are committed to fostering the personal and professional growth of our employees. Develop and advance yourself though our comprehensive training, educational and mentorship programs.</div></div><div><div><br>
Veteran Support</div><div><br>
We provide Industry leading benefits to support veterans and active-duty members to provide security for you and your family by offering robust leave and benefits; including paid active-duty military leave and paid time off when transitioning back to civilian life.</div></div><div><div>
Mind &amp; Body</div><div><br>
At Parsons we inspire healthier habits, heathier minds, and a healthier you through our wellness program. Participate in our weekly Meditation Mondays and Wellness Wednesdays. Wellness, at Parsons, is more than just your annual checkup.</div></div><div><div>
Health</div><div><br>
Health is not a one size fits all. At Parsons, we offer a robust Employee Assistance Program as well as comprehensive medical, dental and vision plans through large, national carriers with the choice of regional PPO, HDHP, or HMO networks.</div></div></div></div><p></p>

Information Systems Security Officer, Senior

Search 10000+ Information assurance analyst jobs near you this April. New roles added regularly across leading industries. Apply today.