Information Assurance Analyst

Leidos • Suffolk, VA

1d • $87,100 - $157,450

About The Position

Leidos Digital Sector is seeking an experienced Information Assurance Analyst to protect the confidentiality, integrity, and availability of information systems by managing security and compliance across enterprise cloud and network infrastructure. The analyst serves as a subject matter expert in risk management and compliance, translating federal and DoD security directives into actionable controls and procedures. The role also involves continuous security posture monitoring, vulnerability management, and maintaining formal documentation needed to achieve and sustain an Authority to Operate (ATO).

Requirements

• Current, active Top Secret security clearance.
• Bachelor of Science degree.
• At least 5 years of dedicated experience in Information Assurance or Cybersecurity.
• At least 2 years of experience securing cloud environments such as AWS or Azure, with working knowledge of FedRAMP controls.
• Certification meeting DoD 8570/8140 IAM Level II requirements, such as CompTIA CASP+, CISM, or CISSP.
• Hands-on experience applying the Risk Management Framework (RMF) from initiation through continuous monitoring.
• Experience conducting vulnerability assessments using ACAS, Nessus, or equivalent tools.
• Experience implementing and auditing systems against Security Technical Implementation Guides (STIGs).

Responsibilities

• Manage and maintain the security posture of enterprise cloud and network services throughout all phases of the Risk Management Framework (RMF) lifecycle.
• Conduct vulnerability scans of network and cloud assets using government-approved tools, analyze results, and coordinate remediation priorities with technical teams.
• Continuously monitor and validate compliance of network devices, servers, and cloud resources against STIGs and agency-specific benchmarks.
• Analyze and verify enterprise cloud compliance, including AWS and Azure environments, against FedRAMP controls and the shared responsibility model.
• Develop, update, and maintain RMF documentation, including System Security Plans (SSPs), security control traceability matrices, and Plans of Action and Milestones (POA&Ms).
• Serve as a primary contact for internal and external security audits, gathering and presenting evidence of control implementation.
• Track, interpret, and report Information Assurance Vulnerability Management (IAVM) directives, coordinating timely remediation and reporting with technical teams.
• Provide information assurance guidance to network and cloud engineering teams so security controls are integrated into the design and implementation of new services.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level