Information Assurance Analyst II / Cybersecurity Engineer

Lone Star Analysis; Los Angeles (CA); On-site; USD 110,000 - 170,000; Full time

Job summary

Lone Star Analysis seeks an Information Assurance professional to support cybersecurity and compliance across DoD programs. You will implement RMF processes, apply NIST 800-53 controls, and coordinate with ISSMs, ISSOs, and engineering teams to safeguard mission-critical systems.

Responsibilities include security assessments, vulnerability management, and ensuring ongoing accreditation and STIG alignment across Windows and Linux environments.

Qualifications

• Bachelor's degree in Cybersecurity, IT, CS, Engineering, or related discipline.
• 6–10+ years of cybersecurity/IA/security experience.
• Experience supporting classified DoD information systems.

Responsibilities

• Implement and maintain security controls per NIST SP 800-53.
• Support cybersecurity operations for classified information systems.
• Conduct security reviews of hardware, software, and network architectures.
• Monitor system security posture and identify remediation areas.
• Assist with continuous monitoring and recurring compliance reviews.
• Support RMF lifecycle and documentation packages.
• Coordinate vulnerability remediation and ensure closure of findings.
• Assist with accreditation activities and security inspections.

Skills

RMF implementation

NIST 800-53 controls

DISA STIGs

ACAS vulnerability management

SCAP compliance scanning

Windows security administration

Linux security administration

Security auditing & reporting

Security documentation development

Vulnerability remediation tracking

Education

Bachelor's degree in Cybersecurity or related field

Tools

eMASS

HBSS

Job description

We are seeking a skilled Information Assurance (IA) professional to support cybersecurity and compliance activities across classified defense programs. The successful candidate will be responsible for implementing and maintaining cybersecurity controls, supporting RMF accreditation efforts, conducting security assessments, and ensuring compliance with DoD cybersecurity requirements.

This position works closely with Information System Security Managers (ISSMs), Information System Security Officers (ISSOs), System Administrators, Software Engineers, and Program Management teams to protect mission-critical systems supporting national defense objectives.

Key Responsibilities

Information Assurance & Cybersecurity

• Implement and maintain security controls in accordance with NIST SP 800-53 requirements.
• Support cybersecurity operations for classified information systems.
• Conduct security reviews of hardware, software, and network architectures.
• Monitor system security posture and identify areas for remediation.
• Assist with continuous monitoring activities and recurring compliance reviews.

RMF Support

• Support all phases of the Risk Management Framework (RMF) lifecycle.
• Prepare and maintain RMF documentation packages.
• Assist with Security Plans (SSP), Security Assessment Reports (SAR), and POA&M development.
• Coordinate vulnerability remediation and ensure timely closure of compliance findings.
• Support cybersecurity inspections and security control assessments.

Vulnerability Management

• Analyze ACAS, SCAP, and vulnerability assessment results.
• Support remediation of vulnerabilities identified through scanning activities.
• Track security findings and corrective actions to closure.
• Validate implementation of STIG requirements.

Compliance & Auditing

• Conduct periodic security audits and compliance assessments.
• Support internal and external cybersecurity assessments.
• Maintain cybersecurity documentation and records.
• Assist government customers during accreditation and inspection activities.

Required Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or related discipline.
• 6-10+ years of cybersecurity, IA, or information security experience.
• Experience supporting classified DoD information systems.

Technical Skills

• RMF implementation
• NIST 800-53 controls
• DISA STIGs
• ACAS vulnerability management
• SCAP compliance scanning
• Windows and Linux security administration
• Security auditing and compliance reporting
• Security documentation development

Security Knowledge

• Security control implementation
• Vulnerability management
• Access control and authentication technologies

Preferred Qualifications

• Experience supporting embedded systems or defense weapon systems.
• eMASS experience.
• HBSS or Endpoint Security Solutions experience.
• Knowledge of secure software development lifecycle concepts.
• Familiarity with classified laboratory or test environments.