Information Assurance Analyst

Atlas Tech, a veteran-owned IT company serving multiple DoD customers in support of America’s warfighters, is seeking an Information Assurance Analyst to join the Information Systems Security Engineering team for an effort to perform analysis and evaluation of the Information Security of Naval software systems. The analyst will be responsible for assisting in the technical implementation of the Risk Management Framework (RMF) Assessment and Authorization (A&A) services by conducting cybersecurity and risk assessments on systems to identify and mitigate technical and non-technical vulnerabilities.

You Will:

• Perform analysis and evaluation to design, implement, test, and field secure systems, networks, containerized environments, and architectures in accordance with RMF and NIST guidelines
• Evaluate information systems security policies, ensuring system security requirements and DISA mandates are addressed during all phases of the acquisition and Information System (IS) lifecycle
• Conduct vulnerability scans, asset/policy configurations, and comprehensive compliance reporting using the DISA Assured Compliance Assessment Solution (ACAS) suite and Evaluate STIG
• Collaborate closely with systems and software engineers to remediate identified vulnerabilities, analyze root causes, and author rigorous technical mitigations for Plan of Action and Milestones (POA&M) to downgrade CAT I and CAT II findings
• Support Authority to Operate (ATO) packages and Annual Security Review (ASR) events by evaluating STIG checks/SRGs across multi-enclave baselines, validating findings, and filtering lab-specific false positives
• Evaluate new hardware, endpoint baselines, and emerging collaborative technologies (e.g., modern Windows Server/workstation builds, Red Hat Enterprise Linux VMs, and Cisco VTC appliances) against applicable DISA SRGs and STIGs
• Conduct rapid research and risk analysis on high-visibility TASKORDs, newly disclosed CVEs, and Nessus plugins to support fleet patch management, operational tasking, and early Engineering Change Request (ECR) development
• Author and standardize formal technical documentation, including Standard Operating Procedures (SOPs), eMASSter reports, Cybersecurity Strategies, System Security Plans (SSPs), and checklist guidance
• Champion knowledge sharing and team capability development by mentoring colleagues and conducting hands-on training sessions (e.g., RHEL scan preparation and STIG evaluation workflows)
• Perform regular security scans of containerized environments to identify vulnerabilities, configuration drift, and compliance gaps
• Implement, monitor, and optimize Microsoft Azure security services, including Azure Security Center, Defender for Cloud, Key Vault, and Azure Policy
• Build automated workflows and scanning pipelines to improve visibility and reduce manual effort across container and cloud assets
• Collaborate with engineering teams to diagnose software defects uncovered during assessments and support development of technical fixes

• 6+ years of hands-on relevant technical cybersecurity experience OR
• 2+ years’ experience in an Information Assurance Analyst or cybersecurity engineering role within DoD environments with a Bachelor’s degree in Computer Science, Software Engineering, Cybersecurity, or related Information Technology field
• U.S. Citizenship
• Active Department of Defense (DoD) Secret level Security Clearance (or higher), enrolled in Continuous Evaluation
• DoD 8140 / 8570 Certification to qualify as Information Assurance Technician (IAT) Level II (e.g., CompTIA Security+ CE or equivalent)
• Demonstrated experience executing and validating Security Technical Implementation Guide (STIG) and Security Requirements Guide (SRG) test plans across complex enterprise baselines
• Advanced proficiency with DISA Assured Compliance Assessment Solution (ACAS) / Tenable Nessus, DISA STIG Viewer, Evaluate STIG, and eMASS / eMASSter reporting tools
• Experience authoring detailed technical mitigation statements and false-positive justifications for POA&Ms submitted for Authorizing Official (AO/NAO) review
• Solid working knowledge of both Microsoft Windows Server/Client platforms and Red Hat Enterprise Linux (RHEL) systems, including system hardening, patch management, and scanning methodologies
• Demonstrated ability to evaluate endpoint vulnerabilities (GPO compliance, and registry configurations) to proactively mitigate fleet-wide security risks
• Experience identifying, reconciling, and managing technical debt and defect tracking within Jira or equivalent tracking systems
• Familiarity with System Development Life Cycle (SDLC) methodologies and NIST Special Publications (including SP 800-37, 800-53, 800-115) and CNSSI 1253.
• Strong written communication and technical authorship skills, with proven ability to develop formal Standard Operating Procedures (SOPs) and comprehensive compliance artifact packages
• Outstanding collaborative and interpersonal skills, with the ability to bridge communication between regional labs, engineering teams, product owners, and government validators

We’d be Impressed if You Had:

• A Bachelor’s degree in Computer Science, Software Engineering, Cybersecurity, or related Information Technology field
• Direct experience supporting U.S. Navy afloat or shore network programs (e.g., CANES, NAVWAR RMF baselines, ESU, or SSA tasking)
• Experience with container security tools and CI/CD pipeline integration (e.g., Anchore Enterprise, JFrog Xray, SBOM generation, Docker/Podman, Spork+ repository integration)
• Hands-on experience conducting containerized STIG evaluations (e.g., NGINX, PostgreSQL, container compliance)
• Experience conducting cybersecurity evaluations on dedicated hardware/peripherals and enterprise conferencing systems (e.g., Cisco Room Bar / VTC systems, Enterprise Video/Voice Messaging SRGs)
• Practical experience working in an Agile/Scrum development environment.
• Red Hat Certified System Administrator (RHCSA) coursework or equivalent Linux administration credentials
• Hands-on experience with Azure-based architectures, including containerized workloads (AKS), identity and access management, and cloud-native security tooling
• Strong programming or scripting capabilities (Python, PowerShell, or similar) to automate scans, develop custom tooling, and contribute directly to engineering solutions
• Experience debugging software issues within complex systems and producing functional code updates, patches, or prototypes

$80,000 - $115,000 Looking for a career where hard work is valued, and your ideas and feedback are part of the way we operate daily? Want to bring your skills to a company that encourages teamwork and champions continued education and process improvement?, Atlas Tech offers a competitive salary, generous benefits package, and an opportunity to make a positive impact in your own community.

‘From day 1, I knew Atlas Tech was where I wanted to be. Atlas’ culture embraces creativeness, community involvement, and taking care of their employees. If you’re looking for a great place to work, come join us!’ - Blane