Information Assurance Analyst II — DoD RMF & Compliance

Lone Star Analysis; Los Angeles (CA); On-site; USD 110,000 - 170,000; Full time

Job summary

Lone Star Analysis seeks an Information Assurance professional to support cybersecurity and compliance across DoD programs. You will implement RMF processes, apply NIST 800-53 controls, and coordinate with ISSMs, ISSOs, and engineering teams to safeguard mission-critical systems.

Responsibilities include security assessments, vulnerability management, and ensuring ongoing accreditation and STIG alignment across Windows and Linux environments.

Qualifications

• Bachelor's degree in Cybersecurity, IT, CS, Engineering, or related discipline.
• 6–10+ years of cybersecurity/IA/security experience.
• Experience supporting classified DoD information systems.

Responsibilities

• Implement and maintain security controls per NIST SP 800-53.
• Support cybersecurity operations for classified information systems.
• Conduct security reviews of hardware, software, and network architectures.
• Monitor system security posture and identify remediation areas.
• Assist with continuous monitoring and recurring compliance reviews.
• Support RMF lifecycle and documentation packages.
• Coordinate vulnerability remediation and ensure closure of findings.
• Assist with accreditation activities and security inspections.

Skills

RMF implementation

NIST 800-53 controls

DISA STIGs

ACAS vulnerability management

SCAP compliance scanning

Windows security administration

Linux security administration

Security auditing & reporting

Security documentation development

Vulnerability remediation tracking

Education

Bachelor's degree in Cybersecurity or related field

Tools

eMASS

HBSS

Job description

Lone Star Analysis seeks an Information Assurance professional to support cybersecurity and compliance across DoD programs. You will implement RMF processes, apply NIST 800-53 controls, and coordinate with ISSMs, ISSOs, and engineering teams to safeguard mission-critical systems.

Responsibilities include security assessments, vulnerability management, and ensuring ongoing accreditation and STIG alignment across Windows and Linux environments.