> Markdown version of [/jobs/ext/1083640-cybersecurity-analyst](https://www.wearedevelopers.com/jobs/ext/1083640-cybersecurity-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cybersecurity Analyst - **Company:** The Informatics Applications Group, Inc. - **Location:** Arlington, VA, United States - **Experience:** Experienced - **Contract:** Internship / Graduate position - **Skills:** Xacta, Amazon Web Services, Antivirus Softwares, Cloud Computing, Cyber Security, Information Systems, Linux, Intrusion Detection Systems, Network Security, Systems Development Life Cycle, Firewalls (Computer Science), Vulnerability Analysis - **Published:** June 10, 2026 - **Apply:** https://www.clearancejobs.com/jobs/8965045/cybersecurity-analyst ## About the Role * 4+ years of professional experience in information security, risk management, or a related field, including internships or coursework. * Basic knowledge of security tools, network security principles, and vulnerability assessment methodologies. * Working experience with the DoD's Assured Compliance Assessment Solution (ACAS) tool is preferred: * Basic knowledge of U.S. Government security policy including Department of Defense and appropriate civil agencies such as NIST, as well as commercial "best practices". * Working knowledge of standard information security products including firewalls, intrusion detection systems, anti-virus systems, vulnerability testing, and security analysis tools. * Familiarity with STIG Viewer * Exposure to the Risk Management Framework (RMF) and the A&A process. * Exposure to a Governance, Risk and Compliance (GRC) tool such as eMASS (preferred), CSAM or XACTA. * Exposure to cloud computing implementation and maintenance preferably with AWS. * Strong analytical and problem-solving skills, with the ability to assess complex security issues and propose solutions. * Excellent verbal and written communication skills; ability to explain technical concepts to non-technical stakeholders. * Ability to work effectively both independently and as part of a team in a fast-paced environment. * Active Secret Clearance or current interim * Associate's degree with 4 years of experience or a Bachelor's degree and 2 years of experience * IAT Level I certification * CompTIA A+, Network+, CCNA (Security+ satisfies the requirement) * Computing environment certification (e.g., Server+, Linux+, AWS Certified Solution Architect (or equivalent) ## Description * Continuously monitors information systems for security threats, vulnerabilities, and breaches. Utilize security tools to analyze alerts and take appropriate action. * Conducts regular risk assessments and vulnerability analyses to identify potential security weaknesses and recommends remediation strategies. * Utilize DISA STIG Viewer to assess, document, and track system compliance with Security Technical Implementation Guides (STIGs), including performing checklist reviews, recording findings, and generating compliance reports. * Supports the Assessment and Authorization (A&A) process as part of the Risk Management Framework (RMF) for multifaceted systems, networks and enclaves. * Assists with risk mitigation through management of the Plan of Action and Milestones (POA&M) process. Verifies actions taken by internal IT support teams satisfy risk mitigation. * Assists in the development and implementation of information assurance policies and procedures to ensure compliance with organizational and regulatory requirements. * Support incident response efforts, including investigating security incidents, documenting findings, and coordinating with relevant teams for remediation. * Maintains accurate documentation of security incidents, assessments, and compliance activities for audit and reporting purposes. * Participates in internal and external audits to assess compliance with security policies and regulatory requirements; provide recommendations for improvement. * Works closely with IT staff and other departments to ensure that security measures are integrated into system development and operational processes. ## Related Videos - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)