Information Security Analyst

Socket.dev; Washington (District of Columbia); Hybrid; USD 80,000 - 90,000; Full time

Job summary

CALIBRE Systems, Inc. is seeking a Journeyman Information Security Analyst to support a DoD client with enterprise cybersecurity for a large program serving military families.

The role is hybrid with some required meetings in Alexandria, VA, and requires an active Secret clearance. Responsibilities include RMF documentation, security control implementation, DISA STIG/ACAS assessments, and POA&M management, with coordination across ISSM, ISSO, and security teams.

Qualifications

• Active Secret clearance required.
• Experience with DoD security processes (RMF, CS, POA&Ms) preferred.

Responsibilities

• Support RMF documentation, security control implementation, assessment activities, and ATO sustainment using eMASS.
• Conduct DISA STIG/SRG and ACAS vulnerability assessments; assist with remediation tracking and reporting.
• Maintain Plans of Action and Milestones (POA&Ms) and coordinate validation with ISSM/ISSO teams.
• Monitor SIEM logs, GovCloud logs, and WAF/NGFW activity; escalate anomalies within timelines.
• Assist with vulnerability assessments, penetration testing, and incident reporting in coordination with Incident Response teams.
• Contribute to weekly cybersecurity activity reporting and risk metrics.
• Support contingency planning, disaster recovery exercises, SOP audits, and cybersecurity exercise activities.

Skills

Active Secret clearance

Job description

CALIBRE Systems, Inc., an employee-owned mission focused solutions and digital transformation company, is looking for a highly qualified Journeyman Information Security Analyst to support a DoD client with enterprise cybersecurity for a large program serving military families. This position will be hybrid with some required meetings in Alexandria, VA.

An active Secret clearance is required for this role.

Salary range for this position is $80k-$90k

Key Responsibilities:

• Support RMF documentation, security control implementation, assessment activities, and ATO sustainment using the DoD enterprise eMASS platform.
• Conduct weekly DISA STIG/SRG and ACAS vulnerability assessments, assist with remediation tracking, and prepare raw scan outputs, weekly threat reports, and ACAS roll-up reports.
• Maintain and update Plans of Action and Milestones (POA&Ms), collect evidence of completion, and coordinate validation with ISSM, ISSO, and Security Control Assessment teams.
• Monitor cybersecurity resources, SIEM-integrated logs, anomaly indicators, account aging, compliance status, WAF/NGFW activity, and GovCloud logs; escalated abnormal findings within required timelines.
• Support daily review of the DC3 Vulnerability Disclosure Program portal and assist with creation and mitigation of associated POA&Ms.
• Assist with vulnerability assessments and penetration testing for new or modified applications, servers, databases, and infrastructure components before deployment.
• Support incident reporting, documentation, and coordination with the Incident Response Team and Tier 2 Cybersecurity Service Provider.
• Contribute to weekly cybersecurity activity reporting, including compliance status, vulnerability assessments, incident management, and risk metrics.
• Support contingency planning, disaster recovery exercises, SOP audits, and cybersecurity exercise activities as directed.
• Access SIPRNet and attend classified briefings at the Government facility in Alexandria, Virginia, as required.