Senior Information Assurance Analyst: RMF, Cloud & DoD Security

Leidos; Suffolk (VA); On-site; USD 87,000 - 157,000; Full time

Job summary

Leidos in the United States is seeking an Information Assurance Analyst to ensure confidentiality, integrity, and availability of information systems by managing security and compliance across enterprise cloud and network infrastructure.

The role acts as SME for RMF, FedRAMP, and STIGs, develops SSPs and POA&Ms, coordinates audits, and guides engineering teams to embed security by design while maintaining continuous monitoring and vulnerability remediation.

Qualifications

• Current Top Secret clearance required.
• BS degree with 5+ years of dedicated IA/Cybersecurity experience.
• 2+ years securing cloud environments (AWS, Azure) with FedRAMP knowledge.
• DoD 8570 IAM Level II certification (e.g., CASP+, CISM, CISSP) required.

Responsibilities

• Manage and maintain the security posture of enterprise cloud and network services across RMF lifecycle.
• Conduct regular vulnerability scans using government-approved tools and coordinate remediation actions.
• Perform continuous monitoring and compliance validation against STIGs and agency benchmarks.
• Analyze and verify FedRAMP alignment and shared responsibility model implementation.
• Develop, update, and maintain RMF documentation (SSP, control matrices, POA&Ms).
• Serve as primary auditor liaison, gathering and presenting evidence of control implementation.
• Track and report IAVM directives with timely remediation.
• Provide security-by-design guidance to network and cloud engineering teams.

Skills

RMF

Vulnerability Assessments

STIGs Compliance

Education

BS degree in Information Assurance or related field

DoD 8570 IAM Level II certification

Tools

ACAS

Nessus

Job description

Leidos in the United States is seeking an Information Assurance Analyst to ensure confidentiality, integrity, and availability of information systems by managing security and compliance across enterprise cloud and network infrastructure.

The role acts as SME for RMF, FedRAMP, and STIGs, develops SSPs and POA&Ms, coordinates audits, and guides engineering teams to embed security by design while maintaining continuous monitoring and vulnerability remediation.