Information Assurance Analyst

Looking for a career where hard work is valued, and your ideas and feedback are part of the way we operate daily? Want to bring your skills to a company that encourages teamwork and champions continued education and process improvement?

Atlas Tech, a veteran-owned IT company serving multiple DoD customers in support of America's warfighters, is seeking an Information Assurance Analyst to join the Information Systems Security Engineering team for an effort to perform analysis and evaluation of the Information Security of Naval software systems. The analyst will be responsible for assisting in the technical implementation of the Risk Management Framework (RMF) Assessment and Authorization (A&A) services by conducting cybersecurity and risk assessments on systems to identify and mitigate technical and non-technical vulnerabilities.

• Perform analysis and evaluation to design, implement, test, and field secure systems, networks, containerized environments, and architectures in accordance with RMF and NIST guidelines
• Evaluate information systems security policies, ensuring system security requirements and DISA mandates are addressed during all phases of the acquisition and Information System (IS) lifecycle
• Conduct vulnerability scans, asset/policy configurations, and comprehensive compliance reporting using the DISA Assured Compliance Assessment Solution (ACAS) suite and Evaluate STIG
• Collaborate closely with systems and software engineers to remediate identified vulnerabilities, analyze root causes, and author rigorous technical mitigations for Plan of Action and Milestones (POA&M) to downgrade CAT I and CAT II findings
• Support Authority to Operate (ATO) packages and Annual Security Review (ASR) events by evaluating STIG checks/SRGs across multi-enclave baselines, validating findings, and filtering lab-specific false positives
• Evaluate new hardware, endpoint baselines, and emerging collaborative technologies (e.g., modern Windows Server/workstation builds, Red Hat Enterprise Linux VMs, and Cisco VTC appliances) against applicable DISA SRGs and STIGs
• Conduct rapid research and risk analysis on high-visibility TASKORDs, newly disclosed CVEs, and Nessus plugins to support fleet patch management, operational tasking, and early Engineering Change Request (ECR) development
• Author and standardize formal technical documentation, including Standard Operating Procedures (SOPs), eMASSter reports, Cybersecurity Strategies, System Security Plans (SSPs), and checklist guidance
• Champion knowledge sharing and team capability development by mentoring colleagues and conducting hands‑on training sessions (e.g., RHEL scan preparation and STIG evaluation workflows)
• Perform regular security scans of containerized environments to identify vulnerabilities, configuration drift, and compliance gaps
• Implement, monitor, and optimize Microsoft Azure security services, including Azure Security Center, Defender for Cloud, Key Vault, and Azure Policy
• Build automated workflows and scanning pipelines to improve visibility and reduce manual effort across container and cloud assets
• Collaborate with engineering teams to diagnose software defects uncovered during assessments and support development of technical fixes

• 6+ years of hands‑on relevant technical cybersecurity experience OR
• 2+ years' experience in an Information Assurance Analyst or cybersecurity engineering role within DoD environments with a Bachelor's degree in Computer Science, Software Engineering, Cybersecurity, or related Information Technology field
• Active Department of Defense (DoD) Secret level Security Clearance (or higher), enrolled in Continuous Evaluation
• DoD 8140 / 8570 Certification to qualify as Information Assurance Technician (IAT) Level II…