> Markdown version of [/jobs/ext/238978-information-security-analyst-stratcom-j2](https://www.wearedevelopers.com/jobs/ext/238978-information-security-analyst-stratcom-j2). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Security Analyst - STRATCOM J2

- **Company:** The Garrett Group
- **Location:** Offutt Air Force Base, NE, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Xacta, CompTIA Security+, Cyber Security, Systems Architecture, Trusted Systems, Information Technology, Bare Metal, Vulnerability Analysis
- **Published:** May 15, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=c0f691fa0d57f53e

## About the Role

Do you have experience in Vulnerability assessment?, * Must possess a current DoD 8570.01-M IAT Level II certification or current DoD 8140 certification.**

 * Minimum of 10 years of experience in cybersecurity and system security roles.
 * Strong knowledge of Xacta or similar security applications for ATO processes.
 * Experience securing systems and applications in cloud, hypervisor, and bare metal environments.
 * In-depth understanding of NIST, DoD, and IC security policies and compliance frameworks.
 * Ability to conduct risk assessments, vulnerability analyses, and security audits.
 * Strong communication skills and ability to work collaboratively in a team environment.

**Approved Certifications for IAT Level II:

 * CompTIA Security+
 * CCNA Security
 * CySA+
 * GICSP
 * GSEC
 * SSCP

Additional Requirements:

 * Ability to travel within the Continental United States (CONUS) approximately twice per calendar year.
 * Top Secret Clearance with eligibility for SCI access

## Description

The Garrett Group is seeking a highly skilled Information Security Specialist to ensure the security and integrity of mission-critical IT systems. The ideal candidate will have extensive experience securing systems and applications in classified environments, implementing cybersecurity best practices, and ensuring compliance with DoD security policies and regulations., * Utilize Xacta or similar security applications for Authorization to Operate (ATO) processes.

 * Secure systems and applications across multiple infrastructures, including cloud, hypervisors, and bare metal environments.
 * Implement and enforce security policies in compliance with NIST, DoD, and IC regulations.
 * Conduct risk assessments and vulnerability analyses to identify and mitigate potential security threats.
 * Develop and maintain security documentation, including system security plans and standard operating procedures.
 * Monitor and respond to security incidents, implementing corrective actions as necessary.
 * Collaborate with IT teams to ensure security is integrated into system architecture and operations.
 * Assist with security audits and ensure compliance with government regulations.


## Related Videos

- [Single Server, Global Reach: Running a Worldwide Marketplace on Bare Metal in a Cloud-Dominated World](https://www.wearedevelopers.com/videos/1206-single-server-global-reach-running-a-worldwide-marketplace-on-bare-metal-in-a-cloud-dominated-world)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)
- [How to Avoid Tech Hype Traps - Josip Stuhli](https://www.wearedevelopers.com/videos/1817-how-to-avoid-tech-hype-traps-josip-stuhli)

## Related Articles

- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)