Information Assurance & Compliance Analyst II

AMERICAN SYSTEMS; California; On-site; USD 85,000 - 120,000; Full time

Job summary

AMERICAN SYSTEMS is seeking an Information Assurance Analyst II to support cybersecurity operations, compliance activities, and proper configuration of information systems in a federal contracting environment.

The role requires DoD policy application, continuous monitoring, incident response, risk analysis, and maintenance of security documentation. Occasional travel for audits may be needed.

Qualifications

• U.S. Citizenship required (per position's eligibility requirement).
• Active Secret clearance with ability to obtain Top Secret/SCI eligibility or active Top Secret with SCI eligibility.
• 8570/8140 IAT Level II Certification (Security+, CC, CCND, SSCP).
• Strong analytical skills to identify and mitigate security risks.
• Good communication skills and ability to work in a team with senior analysts.

Responsibilities

• Perform STIG compliance reviews, support security control assessments, and assist with A&A/RMF activities and remediation.
• Apply DoD cybersecurity policies, standards, and security principles to protect classified IT systems.
• Assist in continuous monitoring to assess control effectiveness, track vulnerabilities, and support RMF reporting.
• Participate in incident response activities: identify, report, and help resolve security incidents.
• Perform risk analysis for system changes and contribute to risk management processes.
• Ensure all system documentation is up to date.
• Manage and maintain POA&Ms by tracking remediation efforts and evidence.
• Oversee configuration management for security-relevant software, hardware, and firmware.
• Travel may be required occasionally for audits or inspections.

Job description

AMERICAN SYSTEMS is seeking an Information Assurance Analyst II to support cybersecurity operations, compliance activities, and proper configuration of information systems in a federal contracting environment.

The role requires DoD policy application, continuous monitoring, incident response, risk analysis, and maintenance of security documentation. Occasional travel for audits may be needed.