Information Security Analyst (Pipeline)

Lucayan Technology Solutions LLC; United States; On-site; USD 90,000 - 130,000; Full time

Job summary

Lucayan Technology Solutions LLC seeks an Information Security Analyst to support cybersecurity compliance and vulnerability management for a federal government IT program. You will perform security assessments, manage POA&Ms, support RMF documentation, and contribute to maintaining the security posture of enterprise systems in a DoD environment.

The role requires U.S. citizenship, a minimum T3 clearance, and 3–5 years of information security experience.

Qualifications

• U.S. Citizenship required.
• Security Clearance: minimum T3 required.
• Bachelor's degree in a relevant field OR DoD 8570/8140 IA baseline certification.
• Minimum 3–5 years of information security experience in a federal or DoD environment.
• Working knowledge of NIST SP 800-53, RMF, and STIG compliance requirements.
• Hands-on experience with ACAS, SCC/SCAP, or similar vulnerability scanning tools.

Responsibilities

• Perform vulnerability scanning, STIG assessments, and security compliance monitoring.
• Develop and manage POA&Ms for identified vulnerabilities in compliance with DoD timelines.
• Support RMF documentation and ATO package development in eMASS.
• Assist with cyber incident identification, reporting, and response activities.
• Support external security assessments, audits, and penetration tests.
• Maintain security compliance documentation and cybersecurity workforce qualification records.
• Assist with Privacy Impact Assessments and information protection compliance monitoring.

Skills

Vulnerability management

RMF

Security assessments

DoD guidance

Education

Bachelor's degree in a relevant field

DoD 8570/8140 IA baseline certification

Tools

ACAS

SCC/SCAP

eMASS

Fortify

BurpSuite

Job description

About Lucayan Technology Solutions LLC

At Lucayan Technology Solutions LLC, we deliver secure, innovative solutions in support of national defense and intelligence missions. As a trusted government contracting partner, we provide top-tier intelligence and technology services that safeguard our nation. Our team is mission-driven, and we are committed to building careers that matter.

Location

This is a US-based remote position, with candidates in the Tampa Bay area preferred.

• Tampa-based employees may have the possibility of transitioning to a hybrid schedule in the future, requiring periodic onsite presence at our Tampa, FL location.

Employment Type

Full-Time Core business hours with on-call availability

Security Clearance

minimum T3 required

Job Summary

We are seeking a skilled Information Security Analyst to support cybersecurity compliance and vulnerability management activities for a federal government IT program. You will perform security assessments, manage POA&Ms, support RMF documentation, and contribute to maintaining the security posture of enterprise systems in a DoD environment.

Key Responsibilities

• Perform vulnerability scanning, STIG assessments, and security compliance monitoring.
• Develop and manage POA&Ms for identified vulnerabilities in compliance with DoD timelines.
• Support RMF documentation and ATO package development in eMASS.
• Assist with cyber incident identification, reporting, and response activities.
• Support external security assessments, audits, and penetration tests.
• Maintain security compliance documentation and cybersecurity workforce qualification records.
• Assist with Privacy Impact Assessments and information protection compliance monitoring.

Required Qualifications

• U.S. Citizenship required.
• Security Clearance: minimum T3 required.
• Bachelor's degree in a relevant field OR DoD 8570/8140 IA baseline certification.
• Minimum 3–5 years of information security experience in a federal or DoD environment.
• Working knowledge of NIST SP 800-53, RMF, and STIG compliance requirements.
• Hands-on experience with ACAS, SCC/SCAP, or similar vulnerability scanning tools.

Preferred Qualifications

• Security+, CEH, or equivalent DoD 8570 certification.
• eMASS experience for RMF package support.
• Familiarity with application security scanning tools (Fortify, Sonatype, BurpSuite).
• Knowledge of federal privacy compliance requirements.

Certifications

• DoD 8570 baseline certification required (Security+ or equivalent).