Information Assurance Analyst

Leidos • Suffolk, VA

11h

About The Position

Leidos Digital Sector is seeking an Information Assurance Analyst to help ensure the confidentiality, integrity, and availability of information systems by managing security and compliance across enterprise cloud and network infrastructure. The analyst serves as a subject matter expert on risk management and compliance, translating federal and DoD security directives into actionable controls and procedures. The position continuously monitors security posture, manages vulnerabilities, and maintains the documentation needed to achieve and sustain an Authority to Operate (ATO).

Requirements

• Active Top Secret security clearance at the time of consideration.
• Bachelor of Science degree.
• At least 5 years of dedicated experience in Information Assurance or Cybersecurity.
• At least 2 years of experience securing cloud environments such as AWS or Azure.
• Working knowledge of FedRAMP controls.
• Certification meeting DoD 8570/8140 IAM Level II requirements, such as CompTIA CASP+, CISM, or CISSP.
• Hands-on experience applying the RMF from initiation through continuous monitoring.
• Experience conducting vulnerability assessments with tools such as ACAS, Nessus, or equivalent systems.
• Experience implementing and auditing systems against Security Technical Implementation Guides (STIGs).

Responsibilities

• Manage and maintain the security posture of enterprise cloud and network services throughout the Risk Management Framework (RMF) lifecycle.
• Conduct vulnerability scans of network and cloud assets using government-approved tools, analyze results, and coordinate remediation priorities with technical teams.
• Continuously monitor and validate compliance of network devices, servers, and cloud resources against STIGs and agency-specific benchmarks.
• Analyze and verify compliance in enterprise cloud environments such as AWS and Azure, including alignment with FedRAMP controls and the shared responsibility model.
• Develop, update, and maintain RMF documentation, including System Security Plans (SSPs), security control traceability matrices, and Plans of Action and Milestones (POA&Ms).
• Serve as a primary contact for internal and external security audits; gather and present evidence of control implementation.
• Track, interpret, and report Information Assurance Vulnerability Management (IAVM) directives, coordinating timely remediation and reporting with technical teams.
• Advise network and cloud engineering teams on integrating security controls into new service design and implementation.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level