Information Security Analyst

Information Security Analyst Job#: 3058554

Job Description:

Candidates must be U.S. citizens able to obtain and/or maintain a Department of Defense security clearance as a condition and continuation of employment.

Information Security Analyst – Journeyman

Location:

Fort Lee, VA

Schedule:

Monday – Friday Clearance:
Active DoD Secret clearance or ability to obtain and maintain an interim Secret clearance prior to start

Position Overview We are seeking an Information Security Analyst – Journeyman to support a cybersecurity and technical remediation team within a Department of Defense environment.

This role is focused on identifying, tracking, and remediating cybersecurity vulnerabilities across Windows enterprise systems. The analyst will review vulnerability scan findings and POA&M remediation tasks, work directly with desktop and systems administrators to implement corrective actions, address STIG and IAVM findings, and provide supporting documentation and evidence for validation and closure.

Key Responsibilities Review and analyze vulnerability scan results from ACAS/Tenable Nessus, SCAP, and related compliance tools.

Prioritize vulnerabilities based on CAT I/II/III classifications, CVSS scores, and IAVM timelines.

Execute technical remediation tasks associated with Plans of Action and Milestones (POA&Ms).Work with desktop administrators and systems engineers to remediate vulnerabilities through:

Windows patching

Registry modifications

Group Policy (GPO) changes

Security baseline configurationScript execution and verification

Review and remediate DISA STIG and SCAP compliance findings.

Troubleshoot non-compliant Windows endpoint configurations and implement required security controls.

Collect remediation evidence such as command outputs, screenshots, configuration logs, and test results.

Perform pre-scan validation to confirm patches, GPO changes, and hardening configurations have been successfully applied.

Track Information Assurance Vulnerability Management (IAVM) notices and assigned remediation activities.

Maintain accurate remediation status and documentation within enterprise ticketing platforms such as Service Now, BMC Remedy, or Ivanti.

Coordinate with endpoint administrators to support the health and maintenance of McAfee/Trellix ESS/HBSS security agents.

Required Skills & Experience Experience reviewing and interpreting vulnerability scans from ACAS/Tenable Nessus and SCAP/SCC.Hands-on experience remediating cybersecurity vulnerabilities within a Windows enterprise environment.

Experience with Group Policy, Windows Registry changes, patching, security baselines, and script execution.

Working knowledge of DISA STIGs, SRGs, and .ckl checklist formats.

Understanding of DoD vulnerability management concepts, including:

IAVMCAT I, II, and III vulnerabilitiesCVSS scoringPOA&M remediation

Experience documenting remediation activities and providing technical evidence for validation.

Familiarity with enterprise ITSM platforms such as Service Now, BMC Remedy, or Ivanti.

Basic understanding of Public Key Infrastructure (PKI) and endpoint security tools such as ESS/HBSS.Strong written and verbal communication skills with the ability to coordinate effectively with technical teams and cybersecurity stakeholders.

Qualifications Bachelor’s degree plus 3 years of relevant experience.

Must hold an active DoD 8140 foundational-level qualifying certification, such as:

Security+CySA+Pen Test+CEHGSECGCIHGCEDGICSPGCSACloud+Other qualifying DoD 8140 certification

Experience or training with ACAS and/or eMASS preferred.

ITIL 4 Foundation certification is preferred or may be obtained after hire.

Must possess an active DoD Secret clearance or be eligible to obtain and maintain an interim Secret clearance prior to starting.

Everforth…