Information Security Analyst

• Perform vulnerability scanning, STIG assessments, and security compliance monitoring
• Develop and manage POA&Ms for identified vulnerabilities in compliance with DoD timelines
• Support RMF documentation and ATO package development in eMASS
• Assist with cyber incident identification, reporting, and response activities
• Support external security assessments, audits, and penetration tests
• Maintain security compliance documentation and cybersecurity workforce qualification records
• Assist with Privacy Impact Assessments and information protection compliance monitoring

• U.S. Citizenship required
• Security Clearance: minimum T3 required
• Bachelor's degree in a relevant field OR DoD 8570/8140 IA baseline certification
• Minimum 3–5 years of information security experience in a federal or DoD environment
• Working knowledge of NIST SP 800-53, RMF, and STIG compliance requirements
• Hands-on experience with ACAS, SCC/SCAP, or similar vulnerability scanning tools

Demonstrates expertise in vulnerability scanning, security compliance monitoring, and risk management framework (RMF) documentation. Proficient in developing and managing Plans of Action and Milestones (POA&Ms) while ensuring adherence to DoD compliance standards.

• Vulnerability Scanning
• NIST SP 800-53 Compliance
• Risk Management Framework (RMF)
• Security Clearance T3
• DoD 8570/8140 IA Baseline Certification

• Security Compliance Monitoring
• STIG Assessments
• Cyber Incident Response
• Information Security Experience
• Privacy Impact Assessments

• Bachelor's Degree in Relevant Field
• DoD 8570/8140 IA Baseline Certification

• Federal Environment
• DoD Environment
• Security Compliance Documentation

• ACAS
• SCC/SCAP
• EMASS