> Markdown version of [/jobs/ext/1425193-information-assurance-security-analyst](https://www.wearedevelopers.com/jobs/ext/1425193-information-assurance-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Assurance Security Analyst

- **Company:** SMS Data Products Group, Inc.
- **Location:** San Antonio, TX, United States
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Complex Networks, Cyber Security, Microsoft Office, Computer Networking Systems, Information Technology, Plan of Action and Milestones
- **Published:** July 24, 2026
- **Apply:** https://www.clearancejobs.com/jobs/9054751/information-assurance-security-analyst

## About the Role

* Three to five years of progressively responsible IT security consulting experience on government contracts
 * Must have eMASS experience
 * Must have experience creating RMF packages that demonstrate compliance with RMF controls
 * Must have strong understanding of NIST SP 800-37 (RMF for IT Systems)
 * Must have demonstrated STIG analysis experience (candidate need to be able to interpret them, assess systems for compliance, and document findings in the ATO packages) and knowledge of STIG tools
 * Individual must have high degree of skills with the MS Office toolsets.
 * Knowledge and experience in the certification and accreditation processes that require knowledge of DoD Guidance (DoDD 8500.1, DoDI 8500.2, 8520, AR 25-2), DITSCAP, RMF, Air Force Best Business Practices (BBP) and information assurance and auditing.
 * Knowledge and experience in C&A workflow in accordance with RMF requirements, preparation of system-related RMF artifacts, system security engineering, preparation of security test plans and their execution, remediation of system vulnerabilities, and preparation of IA documentation including PPS matrix, POA&M and system security plans.
 * Candidate must possess refined critical thinking skills, should be a self-starter, may direct the activities of other team members, diplomatic, multi-task capable, adaptive to a dynamic environment, dependable and reliable.
 * Strong verbal and written communication skills as well as the ability to work independently as required.

Certifications Required

 * CompTIA Security+CE

Clearance Required

 * DoD Top Secret/SCI is required.

## Description

* Perform Computer Security Incident Response activities for a large organization; coordinates with other government agencies to record and report incidents in accordance with DoD, Air Force, and Local Operating Policies and Instructions.
 * Ensure that CCSD networked systems, RDT&E, and standalone systems and programs comply with AFI 17-101 and appropriate local Operating Instructions. which provides life-cycle management for Information Assurance (IA) and other critical systems.
 * Analyze complex network and IA systems in unclassified and classified environments for compliance with DoD and industry best practices security configuration requirements.
 * Write Standard Operation Procedures (SOP), COOP, Configurations, and other documentation in support of RMF as required.
 * Provide technical evaluation of proposed system(s) and application approaches.
 * Validate Information Assurance (IA) Controls.
 * Assist the Government with various IA, Security, EMSEC and other inspections.
 * Assist with the destruction of classified media.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Demystifying application networking in the cloud](https://www.wearedevelopers.com/videos/675-demystifying-application-networking-in-the-cloud)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)
- [A Primer on Blockchain and Hedera: An Intro Through Terms](https://www.wearedevelopers.com/videos/633-a-primer-on-blockchain-and-hedera-an-intro-through-terms)
- [Maturity assessment for technicians or how I learned to love OWASP SAMM](https://www.wearedevelopers.com/videos/351-maturity-assessment-for-technicians-or-how-i-learned-to-love-owasp-samm)

## Related Articles

- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [7 Important Tips That Every Software Developer Should Know](https://www.wearedevelopers.com/magazine/101-7-important-tips-that-every-software-developer-should-know)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)