Information Assurance Analyst

Lucayan Technology Solutions LLC; Arlington (VA); Hybrid; USD 90,000 - 120,000; Full time

Benefits offered by this job

Remote work option

Occasional on-site visits to Arlington

Job summary

Lucayan Technology Solutions LLC is seeking an Information Assurance (IA) Analyst to support the Headquarters, Department of the Army G-1, DPRR Information Assurance Support Services program. This role conducts vulnerability scans, IAVA monitoring, STIG checks, and change-request analysis for DAMIS and related Azure-hosted apps, ensuring DoD cybersecurity requirements and ATO remain current.

Core hours are 7:30 a.m. to 4:30 p.m.

Qualifications

• IA/cybersecurity experience in an environment hosting Oracle databases and .NET web applications.
• Solid Red Hat and Windows security and administration experience; able to report on vulnerabilities.
• Experience conducting weekly, monthly, and annual vulnerability scans.
• Familiar with DISA STIG checklists and system compliance.
• Ability to review change requests and recommend implementations within 2 business days.
• Strong technical writing and organizational skills; able to manage recurring compliance deadlines.
• Active Tier 3 (NACI) or higher federal background investigation prior to start; ability to obtain CAC.

Responsibilities

• Conduct ACAS vulnerability scans weekly, monthly, and annually for assets within the DAMIS boundary.
• Monitor IAVA alerts, assess applicability, and prepare reports with recommended actions.
• Review change requests and implement approved changes in coordination with DAMIS staff.
• Execute DISA STIG checklists and weekly CCI checks across Windows, Red Hat, Oracle, .NET/IIS, and Azure components.
• Support RMF documentation and annual contingency, security, and recovery testing.
• Participate in CERT and respond to incidents within designated time frames.
• Attend working groups, prepare minutes within 2 business days.
• Provide backup coverage for Senior IA Analyst tasks as needed.

Skills

IA/Cybersecurity

Vulnerability assessment

Windows security

Red Hat security

DISA STIG

Technical writing

Background investigation

Education

Bachelor's degree in cybersecurity or CS

Tools

ACAS

eMASS

SCAP Compliance Checker

DISA STIG Viewer

Azure administration

Job description

AtLucayan Technology Solutions LLC, we deliver secure, innovative solutions in support of national defense and intelligence missions. As a trusted government contracting partner, we provide top-tier intelligence and technology services that safeguard our nation. Our team is mission-driven, and we are committed to building careers that matter.

Location: This is a US-based remote position, with occasional on-site visits to Arlington, VA as required (travel at employee's expense).

Employment Type: Full-Time, Monday through Friday 7:30 a.m. - 4:30 p.m.

Security Clearance: No security clearance required. Active favorably adjudicated Tier 3 (NACI) or higher federal background investigation required prior to start; ability to obtain and maintain a DoD Common Access Card (CAC).

Job Summary

Lucayan Technology Solutions LLC is seeking an Information Assurance (IA) Analyst to support the Headquarters, Department of the Army G-1, Directorate of Prevention, Resilience, and Readiness (DPRR) Information Assurance Support Services (IASS) program. This key personnel role performs vulnerability scanning, IAVA monitoring, STIG compliance, and system change-request analysis for the Drug and Alcohol Management Information System (DAMIS), the Risk Reduction Unit Risk Inventory Application, and associated standalone applications hosted in the cArmy Azure Cloud. Working under the Senior IA Analyst / Program Manager and in coordination with DAMIS technical staff, this position helps keep the system continuously compliant with DoW and Army cybersecurity requirements and its Authority to Operate (ATO) current. Core hours are 7:30 a.m. to 4:30 p.m. Eastern Time, Monday through Friday.

Key Responsibilities

• Conduct weekly, monthly, and annual ACAS vulnerability scans of all assets in the DAMIS authorization boundary, submit results to the System Owner/COR and P-ISSM, and upload them to eMASS within one week of scan completion.
• Monitor Information Assurance Vulnerability Alerts (IAVA) and related notices, assess applicability, and prepare IAVA reports and recommended corrective actions.
• Review system change requests, recommend alternatives based on IA vulnerabilities, and implement approved changes within 2 business days in coordination with DAMIS technical staff.
• Execute DISA STIG checklists and weekly CCI checks across Windows, Red Hat, Oracle, .NET/IIS, and Azure components, and support continuous monitoring of ATO requirements.
• Support RMF documentation and annual contingency, security, and recovery testing.
• Serve as a member of the agency's Computer Emergency Response Team (CERT), acknowledging incidents within 15 minutes and initiating approved mitigation within one hour during duty hours.
• Attend working groups and recurring meetings, and prepare meeting minutes within 2 business days.
• Review the Senior IA Analyst's deliverables for quality and provide backup coverage for program tasks as needed.

Required Qualifications

• IA/cybersecurity experience within an environment hosting Oracle databases and .NET web applications.
• Solid Red Hat and Windows security and administration experience, with the ability to assess and report on system vulnerabilities.
• Demonstrated technical proficiency conducting weekly, monthly, and annual vulnerability scans.
• Strong familiarity executing DISA STIG checklists for system compliance.
• Ability to review system change requests and recommend implementation or alternatives within a 2-business-day turnaround.
• Strong technical writing and organizational skills, with the ability to manage recurring compliance deadlines.
• Active favorably adjudicated Tier 3 (NACI) or higher federal background investigation prior to start.
• Ability to obtain and maintain a DoD Common Access Card (CAC).

Preferred Qualifications

• Experience with Microsoft Azure administration (highly preferred).
• Experience with ACAS, eMASS, SCAP Compliance Checker, and DISA STIG Viewer.
• Experience supporting DoD systems through ATO authorization and continuous monitoring.
• Experience with systems handling Privacy Act, PII, or HIPAA-protected data.
• Bachelor's degree in cybersecurity, computer science, or a related field.

Certifications

• Active Tier 3 (NACI) or higher background investigation prior to start.
• DoD 8570 IAT Level II certification (e.g., Security+ CE, CySA+, GSEC, CCNA Security) required at time of hire and maintained throughout employment.
• Azure security or Red Hat administration certification desired.