> Markdown version of [/jobs/ext/3752925-information-assurance-analyst](https://www.wearedevelopers.com/jobs/ext/3752925-information-assurance-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Assurance Analyst

- **Company:** Leidos, Inc.
- **Location:** United States
- **Experience:** Experienced
- **Salary:** $87,100.0 - $157,450.0
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Microsoft Azure, Cloud Engineering, Cyber Security, Identity and Access Management, Networking Hardware, Network Service, Software Vulnerability Management, Information Security Management System, Plan of Action and Milestones
- **Published:** October 15, 2026
- **Apply:** https://jobs.military.com/career/366342/information-assurance-analyst-virginia-va-suffolk

## About the Role

* Require BS degree with a minimum of 5 years of dedicated experience in Information Assurance or Cybersecurity.\n
 * At least 2 years of experience of securing cloud environments (e.g., AWS, Azure) and a working knowledge of FedRAMP controls.\n
 * Must hold a certification meeting DoD 8570/8140 IAM Level II requirements (e.g., CompTIA CASP+, CISM, or CISSP).\n

## Description

* Manage and maintain the security posture of enterprise cloud and network services throughout all phases of the Risk Management Framework (RMF) lifecycle.\n
 * Conduct regular vulnerability scans of network and cloud assets using government-approved tools, analyze scan results, and coordinate with technical teams to prioritize remediation actions.\n
 * Perform continuous monitoring and compliance validation of network devices, servers, and cloud resources against Security Technical Implementation Guides (STIGs) and other agency-specific benchmarks.\n
 * Analyze and verify compliance within the enterprise cloud environment (e.g., AWS, Azure), ensuring alignment with FedRAMP controls and proper implementation of the shared responsibility model.\n
 * Develop, update, and maintain all necessary RMF documentation, including the System Security Plan (SSP), security control traceability matrices, and Plans of Action and Milestones (POA&M).\n
 * Serve as a primary point of contact for internal and external security audits, responsible for gathering and presenting evidence of control implementation to auditors.\n
 * Track, interpret, and report on Information Assurance Vulnerability Management (IAVM) directives, coordinating with technical teams to ensure timely remediation and reporting.\n
 * Provide information assurance expertise and guidance to network and cloud engineering teams to ensure security controls are integrated into the design and implementation of new services ("security by design").\n