> Markdown version of [/jobs/ext/153044-senior-information-assurance-cyber-analyst](https://www.wearedevelopers.com/jobs/ext/153044-senior-information-assurance-cyber-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Information Assurance / Cyber Analyst - **Company:** Concept Plus - **Location:** United States (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Agile Methodology, Amazon Web Services, Cyber Security, Data Centers, Multi-Factor Authentication, Federal Information Processing Standards (FIPS), Identity and Access Management, Information Security Management, Security Software, SonarQube, Systems Architecture, Tripwire, SC Clearance, Information Technology, Nessus, Checkmarx, Devsecops, Static Application Security Testing, Vulnerability Analysis, Dynamic Application Security Testing - **Published:** May 19, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=7fc4195681e060b9 ## About the Role Do you have experience in Vulnerability scanning?, Do you have a Bachelor's degree?, * US Citizenship Required * Ability to obtain and/or maintain a Secret Clearance * DoD 8140 intermediate certification or DoD 8570 IAM Level II certifications or higher * Bachelor's degree in Cybersecurity, Information Technology, or a related field. * Must meet DoD 8140 (formerly 8570) IAM Level II certification requirements (e.g., CISSP, CISM, CASP+ CE). * 5-7 years of experience in Federal and DoD cybersecurity compliance. * Expert knowledge of DoD/Air Force cybersecurity mandates, including RMF, DISA STIGs, and the IAVM process. * Hands-on proficiency with cybersecurity tools such as eMASS, Nessus, SonarQube, and/or Checkmarx. * Strong understanding of NIST 800-53 security controls. Preferred Qualifications * Experience in a U.S. Air Force program environment. * Knowledge of specific Air Force policies such as AFMAN 17-1301 and 17-1303. * Hands-on experience with additional security tools like Trivy or Dependency Track. * Experience securing systems in an AWS GovCloud environment. * Experience working in an Agile development environment. ## Description Concept Plus is seeking a highly experienced Senior Information Assurance (IA) Cyber Analyst to join our team supporting a critical Air Force program. The program's systems are deployed across classified and unclassified environments, hosted in both DISA data centers and the cloud. The successful candidate will be responsible for supporting the government Information System Security Manager (ISSM) in maintaining the system's cybersecurity posture in accordance with DoD and Air Force policies. You will be responsible for preparing and maintaining the Risk Management Framework (RMF) package, conducting continuous monitoring, and working closely with technical teams to ensure security is integrated throughout the entire system's lifecycle. This role is pivotal in supporting the system's Authority to Operate (ATO) and ensuring robust security from development through production. What you'll do * Support the ISSM by preparing and maintaining the system's RMF package throughout its lifecycle using the eMASS tool. * Develop, maintain, and update all required RMF documentation (SSP, SAR, POA&Ms, ISCM Plan, etc.). * Conduct continuous monitoring, analyze vulnerability scan results, and track the remediation of vulnerabilities by applying DISA STIGs and IAVM-directed patches. * Coordinate security engineering input into system designs and the implementation of security controls. * Analyze results from SAST/DAST security scans (e.g., SonarQube, Checkmarx) and collaborate with the development team on remediation. * Track and respond to cybersecurity incidents, ensuring timely reporting and effective recovery efforts. * Ensure compliance with security requirements such as two-factor authentication, data-at-rest encryption, and FIPS standards. * Document and report on cybersecurity performance, contributing to artifacts like the Software Cybersecurity Release Report * Act as a primary cybersecurity subject matter expert, providing guidance and support to the ISSM and program leadership. * Participating in Agile/DevSecOps development cycles, ensuring security is integrated from concept to deployment. * Review and validate system architecture, configuration changes, and release plans for security impacts. * Prepare for and participate in security assessments, audits, and inspections. * Liaise with external security stakeholders and accrediting authorities as directed. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines) - [Hacking Kubernetes: Live Demo Marathon](https://www.wearedevelopers.com/videos/488-hacking-kubernetes-live-demo-marathon) - [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [DevSecOps: Security in DevOps](https://www.wearedevelopers.com/videos/36-devsecops-security-in-devops) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)