Principal Information Assurance Analyst

🔥 12 hours ago

🇺🇸 United States – Remote

💵 $131.3k - $237.3k / year

⏰ Full Time

🔴 Lead

🧐 Analyst

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Leidos

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1969

🏥 Healthcare

💼 Consulting

📦 Logistics

Healthcare • Consulting • Logistics

Leidos is a leading systems integrator in science, technology, and engineering, providing solutions that transform and enable the missions of its customers. The company operates across various markets, including aviation, defense, energy, government, healthcare, intelligence, science, and space. Leidos is involved in AI, digital modernization, cyber operations, and integrated and mission software systems. With a commitment to diversity, equity, inclusion, and sustainability, Leidos also engages in charitable efforts and community enrichment programs. Additionally, it contributes to developing solutions for counter-unmanned aerial systems and electric vehicle infrastructure for military applications.

📋 Description

• Support the Defense Enclave Services (DES) team and digital modernization program for DISA and DoD Fourth Estate Agencies • Support engineering teams improving and scaling the DES single service provider integrated environment • Perform or review technical security assessments to identify vulnerabilities and non-compliance • Recommend mitigation strategies and develop approaches to secure environments • Assess threats and provide input on security designs and architectures • Perform Risk Management Framework (RMF) activities and participate in certification and accreditation risk assessments • Deliver enhanced DISA network capabilities, including Zero-Trust policies, network service migrations, wireless LAN modernization, and IPv6 implementation • Explain security policy implications of design decisions and document compliance for Authority to Operate submissions • Coordinate information assurance submissions with government ISSM counterparts • Lead cybersecurity submissions for engineering projects through design, testing, and deployment • Evaluate, develop, and implement information assurance guidelines and procedures • Perform vulnerability and risk analyses throughout the system development life cycle • Conduct IT security site surveys • Develop and deliver RMF accreditation packages and supporting artifacts in accordance with NIST 800-37 Revision 2 • Provide input to Audit and Accountability Plans and access control policies aligned with NIST SP 800-53 • Develop processes for evaluating and documenting vulnerabilities under DoDI 8510.01 • Ensure information systems meet compliance requirements and resolve security violations • Establish information assurance and security requirements based on user, policy, regulatory, and resource demands • Perform vulnerability and assessment scans using multiple tools • Mentor team members • Monitor equipment and procedure updates to maintain IA requirements and business needs • Identify security requirements for handling Government data

🎯 Requirements

• Must hold an active Secret security clearance • US Citizenship required • Bachelor’s degree and 12+ years of experience; additional years of directly applicable experience may be accepted in lieu of a degree • Prior relevant experience working with RMF, serving in an ISSO, ISSO support, SCA representative, or similar role • Current DoD 8570 IAT II Certification is required (Sec+) • Experience performing various types of vulnerability and assessment scans with multiple tools • Experience using eMASS and/or Xacta • Solid understanding of the Risk Management Framework (RMF) and the System Development Life Cycle (SDLC) • Understanding of hardware and software engineering best practices • Demonstrated analytical and problem-solving skills • Must meet eligibility requirements for work assignment on specified contract • Must meet eligibility requirements following a government security investigation • Preferred: experience collaborating with diverse stakeholders to drive consensus and forward progress • Preferred: ability to identify needed process changes and implement continuous improvement solutions • Preferred: CISSP, CISA, and/or CAP certification • Preferred: ability to work successfully as part of a virtual team