Description
The Leidos Digital Sector is seeking an Information Assurance Analyst to ensure the confidentiality, integrity, and availability of information systems by managing the security and compliance framework across the enterprise cloud and network infrastructure.
The Information Assurance Analyst serves as a subject matter expert on risk management and compliance, translating federal and DoD security directives into actionable controls and procedures. The analyst continuously monitors the security posture, manages vulnerabilities, and maintains formal documentation required to achieve and sustain the Authority to Operate (ATO).
Key responsibilities:
- Manage and maintain the security posture of enterprise cloud and network services throughout all phases of the Risk Management Framework (RMF) lifecycle.
- Conduct regular vulnerability scans of network and cloud assets using government-approved tools, analyze scan results, and coordinate with technical teams to prioritize remediation actions.
- Perform continuous monitoring and compliance validation of network devices, servers, and cloud resources against Security Technical Implementation Guides (STIGs) and other agency-specific benchmarks.
- Analyze and verify compliance within the enterprise cloud environment (e.g., AWS, Azure), ensuring alignment with FedRAMP controls and proper implementation of the shared responsibility model.
- Develop, update, and maintain all necessary RMF documentation, including the System Security Plan (SSP), security control traceability matrices, and Plans of Action and Milestones (POA&M).
- Serve as a primary point of contact for internal and external security audits, responsible for gathering and presenting evidence of control implementation to auditors.
- Track, interpret, and report on Information Assurance Vulnerability Management (IAVM) directives, coordinating with technical teams to ensure timely remediation and reporting.
- Provide information assurance expertise and guidance to network and cloud engineering teams to ensure security controls are integrated into the design and implementation of new services.
The successful candidate will have:
- A current Top Secret Security Clearance.
- A BS degree with a minimum of 5 years of dedicated experience in Information Assurance or Cybersecurity.
- At least 2 years of experience securing cloud environments (e.g., AWS, Azure) and a working knowledge of FedRAMP controls.
- A certification meeting DoD 8570/8140 IAM Level II requirements (e.g., CompTIA CASP+, CISM, or CISSP).
Required skills include direct hands-on application of the Risk Management Framework (RMF), experience conducting vulnerability assessments using tools such as ACAS, Nessus, or equivalent systems, and experience implementing and auditing systems against Security Technical Implementation Guides (STIGs).
The pay range for this role is $87,100.00 - $157,450.00.