> Markdown version of [/jobs/ext/4303344-senior-information-assurance-analyst](https://www.wearedevelopers.com/jobs/ext/4303344-senior-information-assurance-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Information Assurance Analyst

- **Company:** Crest Security Assurance LLC
- **Location:** Aberdeen Proving Ground, MD, United States
- **Experience:** Expert
- **Salary:** $95,000.0 - $100,000.0
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Configuration Management, Information Systems, Linux, Verification and Validation (Software), Systems Architecture, Software Vulnerability Management
- **Published:** October 20, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=4c18d56fcc8f1383

## About the Role

* Active Secret security clearance and ability to maintain the required clearance and SIPRNet access throughout performance.
 * Active CASP+ / SecurityX certification or a Government-accepted equivalent; ability to meet the contract's applicable DoD cybersecurity workforce training and certification requirements by award.
 * At least 5 years of experience supporting RMF lifecycle reporting and software/hardware reconciliation.
 * Experience managing Windows, Linux, and Apple network environments and both classified and unclassified networks, including Secret environments.
 * Ability to perform the RMF, security control assessment, configuration management, and continuous monitoring responsibilities described above.
 * Ability to prepare clear technical documentation and work collaboratively with Government stakeholders and the contract team.
 * Ability to work onsite at Aberdeen Proving Ground, MD, and accommodate mission-driven schedule changes, including support outside normal hours when required.

## Description

Crest is seeking a Senior IT Certified Professional to provide cybersecurity engineering and RMF support. The role supports authorization and ongoing compliance of networks through security control implementation and assessment, lifecycle documentation, configuration reviews, and continuous monitoring., * Support RMF lifecycle reporting and documentation for classified and unclassified information systems, including system categorization, boundary definition, and security control selection.

 * Implement and assess security controls; conduct verification and validation activities and assemble evidence supporting security assessments and ATO decisions.
 * Maintain continuous monitoring documentation, track and update POA&Ms, and support information assurance vulnerability management and remediation activities.
 * Perform software and hardware reconciliation; review baseline changes and support configuration management, technical reviews, and control boards.
 * Analyze and validate reported system defects and incident records; assess proposed changes for security, performance, and interoperability impacts.
 * Support system architecture requirements and design reviews, technology migrations, SCA visits, audits, and required reporting in coordination with the Architect/Contract Manager.