Information Assurance Analyst

Leidos; Suffolk (VA); On-site; USD 87,000 - 157,000; Full time

Job summary

Leidos is seeking an Information Assurance Analyst to safeguard information systems by managing RMF across enterprise cloud and network infrastructure. You will translate federal directives into actionable controls and continuously monitor security posture.

You will conduct vulnerability scans (ACAS/Nessus), coordinate remediation, and maintain RMF documentation while supporting audits. A Top Secret clearance and IAM Level II cert are required.

Qualifications

• Direct hands on RMF from initiation to continuous monitoring.
• Experience conducting vulnerability assessments using ACAS/Nessus or equivalent.
• Experience implementing and auditing systems against STIGs.

Responsibilities

• Manage security posture of enterprise cloud and network services through RMF lifecycle.
• Conduct regular vulnerability scans and coordinate remediation with technical teams.
• Perform continuous monitoring and compliance validation against STIGs and FedRAMP controls.
• Develop and maintain RMF artifacts like SSP, STMs, and POA&Ms.
• Coordinate with auditors and provide evidence of control implementation.
• Guide network and cloud teams on secure-by-design practices.

Skills

RMF implementation

Vulnerability assessments

STIGs compliance

Education

Bachelor's degree in Information Assurance or Cybersecurity

Top Secret Clearance

DoD 8570 IAM Level II cert (CASP+/CISM/CISSP)

Tools

ACAS/Nessus

Job description

Information Assurance Analyst

At Leidos, we deliver innovative solutions guided by our commitment to deliver mission success for our customers. Our Mission, Vision, and Values guide the way we do business serving government and commercial customers with smarter, more efficient digital and mission innovations. The Leidos Digital Sector is seeking a highly skilled and experienced Information Assurance Analyst to ensure the confidentiality, integrity, and availability of information systems by managing the security and compliance framework across the enterprise cloud and network infrastructure. The Information Assurance Analyst serves as the subject matter expert on risk management and compliance, translating federal and DoD security directives into actionable controls and procedures. Also continuously monitors the security posture, manages vulnerabilities, and maintains the formal documentation required to achieve and sustain the Authority to Operate (ATO).

Responsibilities

• Manage and maintain the security posture of enterprise cloud and network services throughout all phases of the Risk Management Framework (RMF) lifecycle.
• Conduct regular vulnerability scans of network and cloud assets using government-approved tools, analyze scan results, and coordinate with technical teams to prioritize remediation actions.
• Perform continuous monitoring and compliance validation of network devices, servers, and cloud resources against Security Technical Implementation Guides (STIGs) and other agency-specific benchmarks.
• Analyze and verify compliance within the enterprise cloud environment (e.g., AWS, Azure), ensuring alignment with FedRAMP controls and proper implementation of the shared responsibility model.
• Develop, update, and maintain all necessary RMF documentation, including the System Security Plan (SSP), security control traceability matrices, and Plans of Action and Milestones (POA&M).
• Serve as a primary point of contact for internal and external security audits, responsible for gathering and presenting evidence of control implementation to auditors.
• Track, interpret, and report on Information Assurance Vulnerability Management (IAVM) directives, coordinating with technical teams to ensure timely remediation and reporting.
• Provide information assurance expertise and guidance to network and cloud engineering teams to ensure security controls are integrated into the design and implementation of new services (“security by design”).

Education and Experience

• Requires a current Top Secret Security Clearance.
• Require BS degree with a minimum of 5 years of dedicated experience in Information Assurance or Cybersecurity.
• At least 2 years of experience of securing cloud environments (e.g., AWS, Azure) and a working knowledge of FedRAMP controls.
• Must hold a certification meeting DoD 8570/8140 IAM Level II requirements (e.g., CompTIA CASP+, CISM, or CISSP).
• Must possess an active Top Secret security clearance at time of consideration.

Required Skills

• Direct hands on application of the Risk Management Framework (RMF) from initiation to continuous monitoring.
• Experience conducting vulnerability assessments using tools such as ACAS, Nessus, or equivalent systems.
• Experience implementing and auditing systems against Security Technical Implementation Guides (STIGs).

At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares.

Original Posting: October 14, 2026 For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range: Pay Range $87,100.00 - $157,450.00 The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $17.2 billion for the fiscal year ended January 2, 2026. For more information, visit www.Leidos.com.

Pay and Benefits

Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available here.

Securing Your Data

Leidos will never ask you to provide payment-related information at any part of the employment application process. And Leidos will communicate with you only through emails that are sent from a Leidos.com email address. If you receive an email purporting to be from Leidos that asks for payment-related information or any other personal information, please report the email to [e-mail].

Commitment and Diversity

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.