> Markdown version of [/jobs/ext/4566698-information-security-analyst-journeyman-mon-fri](https://www.wearedevelopers.com/jobs/ext/4566698-information-security-analyst-journeyman-mon-fri). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Security Analyst - Journeyman (Mon - Fri)

- **Company:** One Inc
- **Location:** Petersburg, VA, United States
- **Experience:** Expert
- **Contract:** Contract
- **Skills:** Microsoft Windows, Systems Engineering, Cyber Security, Computer Networks, Data Security, Issue Tracking Systems, McAfee VirusScan, PCI Data Security Standards, Public Key Infrastructure, Comptia Pentest+ CE, Screenshots, Security Content Automation Protocol, Software Vulnerability Management, SC Clearance, Tenable Nessus, Servicenow, Plan of Action and Milestones, Vulnerability Analysis
- **Published:** November 4, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=fa29b95265dfe6d2

## About the Role

* Ability to read, interpret, and prioritize vulnerability scan reports generated by ACAS (Tenable Nessus) and SCAP/SCC tools.
 * Experience executing remediation work orders and tracking remediation tasks tied to government POA&Ms.
 * Practical technical experience remediating cybersecurity findings in a Windows enterprise computing environment (e.g., GPO modifications, registry updates, script execution, and patch verification).
 * Strong working knowledge of DISA STIGs, SRGs, and associated checklist formats (.ckl).
 * Familiarity with DoD cybersecurity concepts, the DoD IAVM program, vulnerability categorization (CAT I, II, III), and CVSS scoring.
 * Experience compiling objective remediation evidence and artifacts (e.g., command outputs, screenshots, configuration logs) for government validation.
 * Working knowledge of enterprise ITSM/ticketing systems (e.g., ServiceNow, BMC Remedy, Ivanti) to track work orders and milestones.
 * Basic understanding of Public Key Infrastructure (PKI) and endpoint protection tools (ESS/HBSS).
 * Strong written and verbal communication skills for effective coordination with system administrators, engineering teams, and government leads., * Education & Experience: Bachelor's degree plus Five (5) years of relevant experience.
 * DoD 8140 Foundational Certification (Required): Active certification (CEH(P), RCCE Level 1, Cloud+, CPTE, FITSP-A, GCED, GCIH, GCSA, GICSP, GSEC, PenTest+, or Security+).
 * Computing Environment Training (Required or obtainable post-hire):
 + Training in ACAS/EMASS.
 + ITIL v4 Foundation certification (preferred / obtainable post-hire).

Clearance Requirement: Active DoD Secret clearance (or ability to obtain and maintain an interim Secret clearance prior to start).

## Description

The Defense Commissary Agency (DeCA) operates under the operational direction of Joint Force Headquarters-Department of Defense Information Network (JFHQ-DoDIN) and United States Cyber Command (USCYBERCOM) to defend and sustain the Department of Defense Information Network as a Tier-1 DoDIN Area of Operations (DAO). DeCA upholds rigorous compliance standards, including the Federal Information Security Modernization Act (FISMA), Payment Card Industry Data Security Standard (PCI-DSS), and the NIST Risk Management Framework (RMF).

 * The Information Security Analyst (Journeyman) is part of a dedicated technical remediation team supporting the Desktop Common Operating Environment (DCOE). In this role, you will receive scan findings and government-directed POA&M work orders, analyze technical requirements, and coordinate directly with desktop and systems administrators to implement fixes, remediate non-compliant STIG configurations, resolve IAVMs, and deliver verification artifacts back to government stakeholders.

Requirements:

Primary Responsibilities:

 * Vulnerability Ingestion & Triage: Review and analyze vulnerability scan reports (ACAS/Tenable) and compliance exports provided by government scanning personnel; prioritize actions based on severity (CAT I/II/III, CVSS, and IAVM timelines).
 * POA&M Work Order Execution: Receive, review, and execute technical work orders and corrective taskings tied to government-established Plans of Action and Milestones (POA&Ms); implement the necessary technical fixes to resolve underlying weaknesses.
 * Hands-on Technical Remediation: Collaborate with Desktop Common Operating Environment (DCOE) administrators and systems engineers to remediate vulnerabilities through patch deployment, registry adjustments, Group Policy (GPO) configuration, and operating system baselines.
 * STIG Remediation & Hardening: Review DISA Security Technical Implementation Guide (STIG) and SCAP compliance findings; implement technical controls on Windows endpoints and document remediation actions or technical hurdles.
 * Remediation Artifact Collection: Gather, format, and provide technical artifacts, test results, and objective evidence to government personnel (ISSM/ISSO) to support government validation and closure of POA&M items.

Secondary Responsibilities:

 * Pre-Scan Validation & Coordination: Conduct local verification to confirm that patches, GPO modifications, and hardening scripts applied properly prior to requesting government re-scans.
 * IAVM Tracking & Work Order Alignment: Track Information Assurance Vulnerability Management (IAVM) notices against assigned remediation work orders, ensuring timely implementation within required operational windows.
 * Ticket Management & Work Order Tracking: Maintain accurate, up-to-date documentation on remediation activities and status updates inside enterprise ticketing systems (e.g., ServiceNow, BMC Remedy, Ivanti).
 * Endpoint Protection Support: Coordinate with endpoint administrators to ensure McAfee/Trellix Endpoint Security Solutions (ESS/HBSS) agents are healthy and updated on target endpoints throughout remediation cycles.