> Markdown version of [/jobs/ext/1451277-information-assurance-security-analyst](https://www.wearedevelopers.com/jobs/ext/1451277-information-assurance-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Assurance Security Analyst

- **Company:** SMS Data Products Group, Inc.
- **Location:** Lackland Air Force Base, TX, United States
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Complex Networks, Cyber Security, Microsoft Office, Computer Networking Systems, Information Technology, Plan of Action and Milestones
- **Published:** July 26, 2026
- **Apply:** https://diversityjobs.com/main/sendform/8/8/28176/1/17707081?backUrl=%2Fcareer%2F17707081%2FInformation-Assurance-Security-Analyst-Texas-Lackland-Air-Force-Base

## About the Role

Three to five years of progressively responsible IT security consulting experience on government contracts
*
Must have eMASS experience
*
Must have experience creating RMF packages that demonstrate compliance with RMF controls
*
Must have strong understanding of NIST SP 800-37 (RMF for IT Systems)
*
Must have demonstrated STIG analysis experience (candidate need to be able to interpret them, assess systems for compliance, and document findings in the ATO packages) and knowledge of STIG tools
*
Individual must have high degree of skills with the MS Office toolsets.
*
Knowledge and experience in the certification and accreditation processes that require knowledge of DoD Guidance (DoDD 8500.1, DoDI 8500.2, 8520, AR 25-2), DITSCAP, RMF, Air Force Best Business Practices (BBP) and information assurance and auditing.
*
Knowledge and experience in C&A workflow in accordance with RMF requirements, preparation of system-related RMF artifacts, system security engineering, preparation of security test plans and their execution, remediation of system vulnerabilities, and preparation of IA documentation including PPS matrix, POA&M and system security plans.
*
Candidate must possess refined critical thinking skills, should be a self-starter, may direct the activities of other team members, diplomatic, multi-task capable, adaptive to a dynamic environment, dependable and reliable.
*
Strong verbal and written communication skills as well as the ability to work independently as required.

Certifications Required

 * CompTIA Security+CE

Clearance Required

 * DoD Top Secret/SCI is required.

## Description

*
Perform Computer Security Incident Response activities for a large organization; coordinates with other government agencies to record and report incidents in accordance with DoD, Air Force, and Local Operating Policies and Instructions.
*
Ensure that CCSD networked systems, RDT&E, and standalone systems and programs comply with AFI 17-101 and appropriate local Operating Instructions. which provides life-cycle management for Information Assurance (IA) and other critical systems.
*
Analyze complex network and IA systems in unclassified and classified environments for compliance with DoD and industry best practices security configuration requirements.
*
Write Standard Operation Procedures (SOP), COOP, Configurations, and other documentation in support of RMF as required.
*
Provide technical evaluation of proposed system(s) and application approaches.
*
Validate Information Assurance (IA) Controls.
*
Assist the Government with various IA, Security, EMSEC and other inspections.
*
Assist with the destruction of classified media.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Demystifying application networking in the cloud](https://www.wearedevelopers.com/videos/675-demystifying-application-networking-in-the-cloud)
- [Maturity assessment for technicians or how I learned to love OWASP SAMM](https://www.wearedevelopers.com/videos/351-maturity-assessment-for-technicians-or-how-i-learned-to-love-owasp-samm)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)
- [A Primer on Blockchain and Hedera: An Intro Through Terms](https://www.wearedevelopers.com/videos/633-a-primer-on-blockchain-and-hedera-an-intro-through-terms)

## Related Articles

- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [7 Important Tips That Every Software Developer Should Know](https://www.wearedevelopers.com/magazine/101-7-important-tips-that-every-software-developer-should-know)