> Markdown version of [/jobs/ext/1339291-information-security-analyst](https://www.wearedevelopers.com/jobs/ext/1339291-information-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Security Analyst

- **Company:** Lucayan Technology Solutions LLC
- **Location:** United States (Remote available)
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Software System Penetration Testing, Cyber Security, Package Development Process, Fortify (Software), Security Content Automation Protocol, Software Vulnerability Management, Sonatype, Software Security, Tenable Nessus, Burpsuite, Vulnerability Analysis
- **Published:** July 18, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=554777974fc7ead6

## About the Role

* U.S. Citizenship required
 * Security Clearance: minimum T3 required
 * Bachelor's degree in a relevant field OR DoD 8570/8140 IA baseline certification
 * Minimum 3-5 years of information security experience in a federal or DoD environment
 * Working knowledge of NIST SP 800-53, RMF, and STIG compliance requirements
 * Hands-on experience with ACAS, SCC/SCAP, or similar vulnerability scanning tools

Preferred Qualifications

 * Security+, CEH, or equivalent DoD 8570 certification
 * eMASS experience for RMF package support
 * Familiarity with application security scanning tools (Fortify, Sonatype, BurpSuite)
 * Knowledge of federal privacy compliance requirements, DoD 8570 baseline certification required (Security+ or equivalent)

## Description

We are seeking a skilled Information Security Analyst to support cybersecurity compliance and vulnerability management activities for a federal government IT program. You will perform security assessments, manage POA&Ms, support RMF documentation, and contribute to maintaining the security posture of enterprise systems in a DoD environment., * Perform vulnerability scanning, STIG assessments, and security compliance monitoring

 * Develop and manage POA&Ms for identified vulnerabilities in compliance with DoD timelines
 * Support RMF documentation and ATO package development in eMASS
 * Assist with cyber incident identification, reporting, and response activities
 * Support external security assessments, audits, and penetration tests
 * Maintain security compliance documentation and cybersecurity workforce qualification records
 * Assist with Privacy Impact Assessments and information protection compliance monitoring


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Open sourcing a library: how hard can that be?](https://www.wearedevelopers.com/videos/1058-open-sourcing-a-library-how-hard-can-that-be)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Securing Your Web Application Pipeline From Intruders](https://www.wearedevelopers.com/videos/53-securing-your-web-application-pipeline-from-intruders)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)
- [Maturity assessment for technicians or how I learned to love OWASP SAMM](https://www.wearedevelopers.com/videos/351-maturity-assessment-for-technicians-or-how-i-learned-to-love-owasp-samm)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [11 Best Practices For PHP Security](https://www.wearedevelopers.com/magazine/90-11-best-practices-for-php-security)