Information Assurance Analyst
- Remote · United States
- Remote
- Mid Level
- Bachelor's degree
- Posted
Skills
Required
- IA / cybersecurity
- Oracle databases
- .NET
- web applications
- Red Hat
- Windows security and administration
- DISA
- STIG checklists
- review system change requests
- Access Card CAC
Preferred
- Microsoft Azure administration
- eMASS
- SCAP Compliance Checker
- STIG Viewer
- Windows
- Oracle
- IIS
- Azure
Responsibilities
- Lucayan Technology Solutions LLC is seeking an Information Assurance (IA) Analyst to support the Headquarters, Department of the Army G-1, Directorate of Prevention, Resilience, and Readiness (DPRR) Information Assurance Support Services (IASS) program.
- This key personnel role performs vulnerability scanning, IAVA monitoring, STIG compliance, and system change-request analysis for the Drug and Alcohol Management Information System (DAMIS), the Risk Reduction Unit Risk Inventory Application, and associated standalone applications hosted in the cArmy Azure Cloud.
- Working under the Senior IA Analyst / Program Manager and in coordination with DAMIS technical staff, this position helps keep the system continuously compliant with DoW and Army cybersecurity requirements and its Authority to Operate (ATO) current.
- Core hours are 7:30 a.m. to 4:30 p.m. Eastern Time, Monday through Friday.
- Conduct weekly, monthly, and annual ACAS vulnerability scans of all assets in the DAMIS authorization boundary, submit results to the System Owner/COR and P-ISSM, and upload them to eMASS within one week of scan completion.
- Information Assurance Vulnerability Alerts (IAVA) and related notices, assess applicability, and prepare IAVA reports and recommended corrective actions.
- Review system change requests, recommend alternatives based on IA vulnerabilities, and implement approved changes within 2 business days in coordination with DAMIS technical staff.
- Execute DISA STIG checklists and weekly CCI checks across Windows, Red Hat, Oracle, .NET/IIS, and Azure components, and support continuous monitoring of ATO requirements.
- Support RMF documentation and annual contingency, security, and recovery testing.
- Serve as a member of the agency's Computer Emergency Response Team (CERT), acknowledging incidents within 15 minutes and initiating approved mitigation within one hour during duty hours.
- Attend working groups and recurring meetings, and prepare meeting minutes within 2 business days.
- Review the Senior IA Analyst's deliverables for quality and provide backup coverage for program tasks as needed.
Requirements
- Full-Time Security Clearance: No security clearance required.
- Active favorably adjudicated Tier 3 (NACI) or higher federal background investigation required prior to start; ability to obtain and maintain a DoD Common Access Card (CAC).
- Qualifications IA/cybersecurity experience within an environment hosting Oracle databases and .NET web applications.
- Solid Red Hat and Windows security and administration experience, with the ability to assess and report on system vulnerabilities.
- Demonstrated technical proficiency conducting weekly, monthly, and annual vulnerability scans.
- Strong familiarity executing DISA STIG checklists for system compliance.
- Ability to review system change requests and recommend implementation or alternatives within a 2-business-day turnaround.
- Strong technical writing and organizational skills, with the ability to manage recurring compliance deadlines.
- Active favorably adjudicated Tier 3 (NACI) or higher federal background investigation prior to start.
- Ability to obtain and maintain a DoD Common Access Card (CAC).
Preferred
- Qualifications Experience with Microsoft Azure administration (highly preferred).
- Experience with ACAS, eMASS, SCAP Compliance Checker, and DISA STIG Viewer.
- Experience supporting DoD systems through ATO authorization and continuous monitoring.
- Experience with systems handling Privacy Act, PII, or HIPAA-protected data.
- Bachelor's degree in cybersecurity, computer science, or a related field.
- Certifications Active Tier 3 (NACI) or higher background investigation prior to start.
- DoD 8570 IAT Level II certification (e.g., Security+ CE, CySA+, GSEC, CCNA Security) required at time of hire and maintained throughout employment.
- Azure security or Red Hat administration certification desired.
- About Lucayan Technology Solutions LLC At Lucayan Technology Solutions LLC, we deliver secure, innovative solutions in support of national defense and intelligence missions. As a trusted government contracting partner, we provide top-tier intelligence and technology services that safeguard our nation. Our team is mission-driven, and we are committed to building careers that matter.
Location
This is a US-based remote position, with occasional on-site visits to Arlington, VA as required (travel at employee's expense).
jobapplier