Information Security Analyst

Lucayan Technology Solutions LLC
United States
25 days ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Experienced
Experience required
3 years minimum
Working hours
Regular working hours
Job source

Tech stack

Software System Penetration Testing Cyber Security Package Development Process Fortify (Software) Security Content Automation Protocol Software Vulnerability Management Sonatype Software Security Tenable Nessus Burpsuite Vulnerability Analysis

Job description

We are seeking a skilled Information Security Analyst to support cybersecurity compliance and vulnerability management activities for a federal government IT program. You will perform security assessments, manage POA&Ms, support RMF documentation, and contribute to maintaining the security posture of enterprise systems in a DoD environment., * Perform vulnerability scanning, STIG assessments, and security compliance monitoring

  • Develop and manage POA&Ms for identified vulnerabilities in compliance with DoD timelines
  • Support RMF documentation and ATO package development in eMASS
  • Assist with cyber incident identification, reporting, and response activities
  • Support external security assessments, audits, and penetration tests
  • Maintain security compliance documentation and cybersecurity workforce qualification records
  • Assist with Privacy Impact Assessments and information protection compliance monitoring

Requirements

  • U.S. Citizenship required
  • Security Clearance: minimum T3 required
  • Bachelor’s degree in a relevant field OR DoD 8570/8140 IA baseline certification
  • Minimum 3-5 years of information security experience in a federal or DoD environment
  • Working knowledge of NIST SP 800-53, RMF, and STIG compliance requirements
  • Hands-on experience with ACAS, SCC/SCAP, or similar vulnerability scanning tools

Preferred Qualifications

  • Security+, CEH, or equivalent DoD 8570 certification
  • eMASS experience for RMF package support
  • Familiarity with application security scanning tools (Fortify, Sonatype, BurpSuite)
  • Knowledge of federal privacy compliance requirements, DoD 8570 baseline certification required (Security+ or equivalent)

About the company

At Lucayan Technology Solutions LLC, we deliver secure, innovative solutions in support of national defense and intelligence missions. As a trusted government contracting partner, we provide top-tier intelligence and technology services that safeguard our nation. Our team is mission-driven, and we are committed to building careers that matter.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.indeed.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

4:37 min

Executing verified publishing workflows on Sonatype Maven Central

Johan Hutting Johan Hutting · WWC 2024

4:11 min

Introduction to cloud-native application developer security

Micah Silverman · WWC 2022

1:45 min

Transitioning from software development to security roles

Stefania Chaplin · WWC 2022

3:44 min

Integrating static security scanning in the build phase

Milecia Mcgregor · LIVE

26:47 min

Exploring pathways to application security careers and research workflows

Vandana Verma Sehgal · LIVE

3:44 min

Current industry adoption and future security initiatives

Alexander Allmendinger · LIVE

Videos

See all

Related articles

See all