> Markdown version of [/jobs/ext/4296230-information-security-analyst-sme-lead](https://www.wearedevelopers.com/jobs/ext/4296230-information-security-analyst-sme-lead). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Security Analyst, SME, Lead

- **Company:** Connected Logistics
- **Location:** Springfield, VA, United States
- **Experience:** Expert
- **Salary:** $120,000.0 - $130,000.0
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Information Systems, Intrusion Detection and Prevention, Systems Integration, Software Vulnerability Management, Information Technology, Plan of Action and Milestones
- **Published:** October 3, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=3d8ae1de569924c2

## About the Role

* U.S. citizenship and a final Secret clearance or higher
 * Relevant degree in cybersecurity, computer science, information systems, or a related discipline, subject to the SME LCAT and permitted substitutions.
 * Advanced Federal continuous-monitoring and vulnerability-management experience with demonstrated team leadership and ongoing authorization support.
 * Proficiency in POA&M management, security impact analysis, risk prioritization, FISMA reporting, and NIST RMF requirements.
 * Practical understanding of Tenable platform administration, credentialed scanning, cloud posture analysis, integrations, and operational escalation.
 * Availability to support coverage planning and after-hours escalation as assigned; meet applicable certification requirements.
 * Meet applicable LCAT certification requirements and maintain required credentials.

Preferred Qualifications

 * CISSP, CGRC, CISM, or role-relevant Tenable and cloud credentials.
 * DOS experience with ArchAngel, Wiz, iPost/iMatrix, SIA/NOC processes, and KEV/BOD remediation.
 * Leadership of shift-based vulnerability operations and automated monitoring workflows.

Success in this position will be demonstrated by reliable operational coverage, current authorization records, actionable monitoring data, timely risk escalation, and validated remediation progress.

## Description

Information Security Analyst, SME (Step 6 /Continuous Monitoring Lead) will direct personnel supporting the operational security and authorization posture of consular systems. The Lead uses system risk, vulnerability exposure, changes, authorization conditions, and reporting obligations to prioritize work and maintain current, traceable RMF records., Responsible for directing continuous monitoring, ongoing authorization support, vulnerability and cloud-posture analysis, POA&M tracking, change-impact reviews, and CO1 Tenable operational coverage.

 * Assign ConMon work and review exception queues, authorization milestones, overdue findings, and emerging risk.
 * Oversee scheduled Tenable coverage, relief staffing, shift handoffs, escalation, platform health, and recovery coordination.
 * Correlate Tenable and Wiz findings with CA systems and authorization boundaries using approved system identifiers.
 * Prioritize KEVs, BOD actions, critical and high findings, remediation milestones, and evidence-backed closure.
 * Direct SIA/NOC reviews and related updates to SSPs, diagrams, inventories, privacy artifacts, and POA&Ms.
 * Coordinate annual assessment support, contingency tests, audit responses, FISMA submissions, and incident-related artifact updates.
 * Escalate authorization-impacting conditions and coordinate return to earlier RMF activities when required.
 * Coordinate CO1 tool responsibilities with CO5 through approved responsibility assignments and interfaces.