> Markdown version of [/jobs/ext/462341-nissc-information-systems-security-analyst-iii](https://www.wearedevelopers.com/jobs/ext/462341-nissc-information-systems-security-analyst-iii). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# NISSC Information Systems Security Analyst III

- **Company:** AMERICAN SYSTEMS
- **Location:** Colorado Springs, CO, United States
- **Experience:** Expert
- **Salary:** $116,200.0 - $194,000.0
- **Contract:** Permanent contract
- **Skills:** Xacta, Software Documentation, Cyber Security, Information Security Management, Security Content Automation Protocol, Nessus, Checkmarx, Vulnerability Analysis, Dynamic Application Security Testing
- **Published:** June 1, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=2b33e28cddcb7e7e

## About the Role

Do you have experience in Vulnerability scanning implementation?, Do you have a Bachelor's degree?, Education: Bachelors in IT, Cyber, CS, IS, Data Science, or SW Engineering OR equivalent DoD/Military training
Clearance: Top Secret/ SCI
Certifications: CCSP, Cloud+, CSC, GCLD, GSEC, and/or SecurityX/CASP+ certification.
Experience: 7-10 Years

 * Expertise in cybersecurity and information assurance principles, with demonstrated ability to implement, monitor, and assess security compliance through vulnerability scans, risk assessments, and incident response.
 * Proficient in coordinating risk management certifications, incident response strategies, security documentation, artifact tracking, and compliance reporting.
 * Skilled in user access provisioning, secure material handling and storage, audit facilitation, and regular production/submission of security plans and reports.
 * Experience leveraging cybersecurity and security management tools such as eMASS, XACTA, CORE, ACAS, SCAP tools, Nessus, Checkmarx, and ZAP DAST.

## Description

* Implement and maintain information security practices, including execution of risk assessments, vulnerability and incident response, compliance tracking, system documentation, and regular production/submission of security event reports, plans, and artifacts.
 * Support secure handling and storage of classified/unclassified materials and user access provisioning, monitor POA&M tracking, and coordinate compliance audits and readiness activities.
 * Lead or support training and process improvement efforts, ensuring protection of sensitive data, improvement of security practices, and overall compliance with DoD policy and contract requirements.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Maturity assessment for technicians or how I learned to love OWASP SAMM](https://www.wearedevelopers.com/videos/351-maturity-assessment-for-technicians-or-how-i-learned-to-love-owasp-samm)
- [Organizational Change Through The Power Of Why - DevSecOps Enablement](https://www.wearedevelopers.com/videos/478-organizational-change-through-the-power-of-why-devsecops-enablement)

## Related Articles

- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)