Information Assurance Analyst

NexGen Data Systems; Suffolk (VA); On-site; USD 90,000 - 140,000; Full time

Benefits offered by this job

Premium health, dental, vision

Disability plans

401(k) with 10% match

Training & development

Holidays & PTO

Job summary

NexGen Data Systems is seeking an Information Assurance Analyst to secure enterprise cloud and network infrastructure, overseeing RMF across on-prem and cloud environments.

You will lead vulnerability management, STIG alignment, and audits, translating DoD directives into actionable controls and keeping SSPs and POA&Ms up to date.

Qualifications

• Active DoD Top Secret clearance
• DoD 8570/8140 IAM Level II certification (e.g., CASP+, CISM, CISSP)
• Minimum five years in Information Assurance or Cybersecurity
• Hands-on RMF from initiation to continuous monitoring
• Experience with vulnerability assessments using ACAS/Nessus or similar
• Experience securing cloud environments (AWS, Azure) and FedRAMP controls

Responsibilities

• Manage and maintain the security posture across RMF lifecycle for enterprise cloud and network services.
• Conduct regular vulnerability scans and coordinate remediation with technical teams.
• Perform continuous monitoring and compliance validation against STIGs and agency benchmarks.
• Verify compliance in cloud environments (AWS, Azure) and ensure FedRAMP alignment.
• Develop and maintain RMF documentation: SSP, control traceability matrices, POA&Ms.
• Serve as primary contact for audits, gathering and presenting evidence of control implementation.
• Track and report Information Assurance Vulnerability Management directives with timely remediation.
• Provide IA guidance to network and cloud engineering teams for secure-by-design implementations.

Skills

DoD TS clearance

IAM Level II cert

RMF experience

Vulnerability tools

STIG compliance

FedRAMP cloud

Job description

Description

NexGen Data Systems is seeking an Information Assurance Analyst (IA). The Information Assurance (IA) Analyst is responsible for ensuring the confidentiality, integrity, and availability of information systems by managing the security and compliance framework across the enterprise cloud and network infrastructure. This role serves as the subject matter expert on risk management and compliance, translating federal and DoD security directives into actionable controls and procedures. The IA Analyst continuously monitors the security posture, manages vulnerabilities, and maintains the formal documentation required to achieve and sustain the Authority to Operate (ATO). This individual acts as the critical link between operational/engineering teams and the formal security accreditation process for both on‑premise network services and cloud environments.

Roles & Responsibilities:

• Shall manage and maintain the security posture of enterprise cloud and network services throughout all phases of the Risk Management Framework (RMF) lifecycle.
• Shall conduct regular vulnerability scans of network and cloud assets using government‑approved tools, analyze scan results, and coordinate with technical teams to prioritize remediation actions.
• Shall perform continuous monitoring and compliance validation of network devices, servers, and cloud resources against Security Technical Implementation Guides (STIGs) and other agency‑specific benchmarks.
• Shall analyze and verify compliance within the enterprise cloud environment (e.g., AWS, Azure), ensuring alignment with FedRAMP controls and proper implementation of the shared responsibility model.
• Shall develop, update, and maintain all necessary RMF documentation, including the System Security Plan (SSP), security control traceability matrices, and Plans of Action and Milestones (POA&M).
• Shall serve as a primary point of contact for internal and external security audits, responsible for gathering and presenting evidence of control implementation to auditors.
• Shall track, interpret, and report on Information Assurance Vulnerability Management (IAVM) directives, coordinating with technical teams to ensure timely remediation and reporting.
• Shall provide information assurance expertise and guidance to network and cloud engineering teams to ensure security controls are integrated into the design and implementation of new services (“security by design”).

Other Duties:

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice.

Requirements

Desired/Required Skills:

• Active Department of Defense Top Secret security clearance required.
• Must hold a certification meeting DoD 8570/8140 IAM Level II requirements (e.g., CompTIA CASP+, CISM, or CISSP).
• Must have a minimum of five (5) years of dedicated experience in Information Assurance or Cybersecurity. This experience must include:
• Direct, hands‑on application of the Risk Management Framework (RMF) from initiation to continuous monitoring.
• Experience conducting vulnerability assessments using tools such as ACAS, Nessus, or equivalent systems.
• Experience implementing and auditing systems against Security Technical Implementation Guides (STIGs).
• At least two (2) years of experience must involve securing cloud environments (e.g., AWS, Azure) and a working knowledge of FedRAMP controls.

About the Company:

NexGen Data Systems is an emerging technologies focused company providing expert systems and network engineering solutions to the Department of Defense. NexGen Data Systems promotes a culture of knowledge and career advancement through continued learning, keeping our team current on the latest advances in systems and networking, and enabling our team to provide the best available solutions to our clients.

Benefits:

• Company covers 100% of premiums for the employee’s medical, dental, and vision insurance and subsidizes premiums for spouse and dependents.
• Company provides short and long term disability plans.
• 401(k) match up to 10% of the employee’s salary contributions to 401(K) plan.
• Comprehensive training and development program.
• 11 paid holidays and paid time off (PTO) accrual level starts at 15 days annually.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status.

NOTE: US Citizens and those authorized to work in the US are encouraged to apply. In order to be qualified for this position, you must be able to obtain and maintain a United States Department of Defense (DoD) security clearance. We are unable to sponsor Visas at this time. NexGen Data Systems provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, national origin, age, disability, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state and local laws.