> Markdown version of [/jobs/ext/277694-information-security-analyst](https://www.wearedevelopers.com/jobs/ext/277694-information-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Security Analyst

- **Company:** INTEGRAL PARTNERSHIPS LLC
- **Location:** Washington, DC, United States
- **Experience:** Experienced
- **Salary:** $115,000.0 - $135,000.0
- **Contract:** Permanent contract
- **Skills:** Apache Tomcat, Cyber Security, Information Systems Security Architecture Professional, Security Content Automation Protocol, Vulnerability Analysis
- **Published:** May 19, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=55440e1112190fad

## About the Role

Bachelor's Degree in IT related degree with 4 years of experience OR Associate's Degree with a minimum of 6 years of relevant experience

 * 2 years of experience conducting TEMPEST performing compliance activities with applicable accrediting authority, TEMPEST instructions, policies, and directives.
 * Have and maintain a Certified Information Systems Security Professional (CISSP) certification.
 * Registered IAT Level II baseline certification: either CCNA Security, CySA+**, GICSP, GSEC, Security+CE, CND, and SSCP (preferred Security+ CE certificate)
 * Secret Clearance

## Description

* Ensure all TSA TOMCAT-supported systems and facilities comply with applicable DHS, other accrediting authority, TEMPEST instructions, policies, and directives.
 * Maintain a robust auditing process for TEMPEST activities, ensuring that all required security reviews, inspections, and audits are conducted in compliance with applicable policies and directives.
 * Responsible for utilizing DISA-approved tools, such as STIG Viewer and Security Content Automation Protocol (SCAP), to facilitate the assessment, implementation, and reporting of STIG compliance
 * Ensure and monitor compliance with all applicable vulnerability directives, including Information Assurance Vulnerability Assessment (IAVA), IA Vulnerability Bulletin (IAVB), Technical Orders (TO), and Time Compliance Networking Orders (TCNOs). Provide support to ensure all systems remain in compliance with established security requirements.
 * Ensure the timely and thorough validation of all applicable Security Technical Implementation Guides (STIGs) across systems, software, and configurations.


## Related Videos

- [How to Cause (or Prevent) a Massive Data Breach- Secure Coding and IDOR](https://www.wearedevelopers.com/videos/39-how-to-cause-or-prevent-a-massive-data-breach-secure-coding-and-idor)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Standing on the Shoulders of Servlets - The Web of Java](https://www.wearedevelopers.com/videos/1917-standing-on-the-shoulders-of-servlets-the-web-of-java)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Securing Your Web Application Pipeline From Intruders](https://www.wearedevelopers.com/videos/53-securing-your-web-application-pipeline-from-intruders)
- [Maturity assessment for technicians or how I learned to love OWASP SAMM](https://www.wearedevelopers.com/videos/351-maturity-assessment-for-technicians-or-how-i-learned-to-love-owasp-samm)

## Related Articles

- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Building Security Champions](https://www.wearedevelopers.com/magazine/87-building-security-champions)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)