Information Security Analyst

The One 23 Group; Fort Gregg-Adams (VA); On-site; USD 100,000 - 140,000; Full time

Job summary

The One 23 Group in Fort Gregg-Adams, VA is seeking an experienced Information Security Analyst (Senior) to support DoD clients. You will analyze vulnerability findings, implement POA&M items, and coordinate with desktop and systems teams to harden Windows endpoints and document verification artifacts.

The role requires active DoD Secret clearance or ability to obtain interim clearance, strong knowledge of STIGs, ACAS/Nessus, and government remediation processes, and proven written and verbal

Qualifications

• Ability to read, interpret, and prioritize vulnerability scans from ACAS and SCAP tools.
• Experience executing remediation work orders tied to government POA&M.
• Practical experience remediating cybersecurity findings in Windows environments (GPO/registry/patches).
• Strong knowledge of DISA STIGs, SRGs and checklist formats (.ckl).
• Familiarity with DoD cybersecurity concepts, IAVM, CAT I/II/III, CVSS scoring.
• Experience compiling remediation evidence for government validation.
• Proficient with enterprise ITSM systems to track work orders and milestones.
• Basic understanding of PKI and endpoint protection tools.
• Strong written and verbal communication with government stakeholders.

Responsibilities

• Vulnerability ingestion, triage, and prioritization by severity and timelines.
• POA&M work order execution and applying technical fixes.
• Hands-on remediation with patching, GPO changes, and OS baselines.
• Review STIGs and document remediation actions for government validation.
• Collect artifacts and evidence to support POA&M closure.
• Coordinate with DCOE admins and engineers during remediation.

Skills

Vulnerability reports interpretation

POA&M remediation

Windows remediation (GPO/patching)

DISA STIGs/SRGs knowledge

DoD cybersecurity concepts & IAVM

Remediation artifacts & evidence

ITSM/ticketing systems (ServiceNow/BMC

PKI & endpoint protection basics

Clear written/verbal communication

Education

Bachelor’s degree

DoD 8140 Foundational Certification

ACAS/EMASS training

ITIL v4 Foundation

Tools

ACAS/Nessus

SCAP/SCC tools

ServiceNow/BMC/Ivanti

Job description

Description

Active DoD Secret clearance (or ability to obtain and maintain an interim Secret clearance prior to start)

At The One 23 Group, our mission is to set the benchmark for excellence in government services. We empower our clients in the Department of Defense (DoD), Intelligence Community, and Federal Civilian sectors to excel through advanced technical capabilities and dedicated mission support. Our foundation rests on a people-first culture, integrity, and proactive problem-solving.

The Defense Commissary Agency (DeCA) operates under the operational direction of Joint Force Headquarters–Department of Defense Information Network (JFHQ-DoDIN) and United States Cyber Command (USCYBERCOM) to defend and sustain the Department of Defense Information Network as a Tier-1 DoDIN Area of Operations (DAO). DeCA upholds rigorous compliance standards, including the Federal Information Security Modernization Act (FISMA), Payment Card Industry Data Security Standard (PCI-DSS), and the NIST Risk Management Framework (RMF).

The Information Security Analyst (Senior) is part of a dedicated technical remediation team supporting the Desktop Common Operating Environment (DCOE). In this role, you will receive scan findings and government-directed POA&M work orders, analyze technical requirements, and coordinate directly with desktop and systems administrators to implement fixes, remediate non-compliant STIG configurations, resolve IAVMs, and deliver verification artifacts back to government stakeholders.

Requirements

Primary Responsibilities

• Vulnerability Ingestion & Triage: Review and analyze vulnerability scan reports (ACAS/Tenable) and compliance exports provided by government scanning personnel; prioritize actions based on severity (CAT I/II/III, CVSS, and IAVM timelines).
• POA&M Work Order Execution: Receive, review, and execute technical work orders and corrective taskings tied to government-established Plans of Action and Milestones (POA&Ms); implement the necessary technical fixes to resolve underlying weaknesses.
• Hands-on Technical Remediation: Collaborate with Desktop Common Operating Environment (DCOE) administrators and systems engineers to remediate vulnerabilities through patch deployment, registry adjustments, Group Policy (GPO) configuration, and operating system baselines.
• STIG Remediation & Hardening: Review DISA Security Technical Implementation Guide (STIG) and SCAP compliance findings; implement technical controls on Windows endpoints and document remediation actions or technical hurdles.
• Remediation Artifact Collection: Gather, format, and provide technical artifacts, test results, and objective evidence to government personnel (ISSM/ISSO) to support government validation and closure of POA&M items.

Secondary Responsibilities

• Pre-Scan Validation & Coordination: Conduct local verification to confirm that patches, GPO modifications, and hardening scripts applied properly prior to requesting government re-scans.
• IAVM Tracking & Work Order Alignment: Track Information Assurance Vulnerability Management (IAVM) notices against assigned remediation work orders, ensuring timely implementation within required operational windows.
• Ticket Management & Work Order Tracking: Maintain accurate, up-to-date documentation on remediation activities and status updates inside enterprise ticketing systems (e.g., ServiceNow, BMC Remedy, Ivanti).
• Endpoint Protection Support: Coordinate with endpoint administrators to ensure McAfee/Trellix Endpoint Security Solutions (ESS) agents are healthy and updated on target endpoints throughout remediation cycles.

Required Knowledge & Skills

• Ability to read, interpret, and prioritize vulnerability scan reports generated by ACAS (Tenable Nessus) and SCAP/SCC tools.
• Experience executing remediation work orders and tracking remediation tasks tied to government POA&M.
• Practical technical experience remediating cybersecurity findings in a Windows enterprise computing environment (e.g., GPO modifications, registry updates, script execution, and patch verification).
• Strong working knowledge of DISA STIGs, SRGs, and associated checklist formats (.ckl).
• Familiarity with DoD cybersecurity concepts, the DoD IAVM program, vulnerability categorization (CAT I, II, III), and CVSS scoring.
• Experience compiling objective remediation evidence and artifacts (e.g., command outputs, screenshots, configuration logs) for government validation.
• Working knowledge of enterprise ITSM/ticketing systems (e.g., ServiceNow, BMC Remedy, Ivanti) to track work orders and milestones.
• Basic understanding of Public Key Infrastructure (PKI) and endpoint protection tools (ESS/HBSS).
• Strong written and verbal communication skills for effective coordination with system administrators, engineering teams, and government leads.

Clearance Requirement

Active DoD Secret clearance (or ability to obtain and maintain an interim Secret clearance prior to start).

Education & Experience

• Bachelor’s degree (required) plus Five (5) years of relevant experience.
• DoD 8140 Foundational Certification (Required): Active certification (CEH(P), RCCE Level 1, Cloud+, CPTE, FITSP-A, GCED, GCIH, GCSA, GICSP, GSEC, PenTest+, or Security+).
• Computing Environment Training (Required or obtainable post-hire): Training in ACAS/EMASS.
• ITIL v4 Foundation certification (preferred / obtainable post-hire).

Equal opportunity employer, including disability/vets.