Information Assurance Analyst

At Leidos, we deliver innovative solutions guided by our commitment to deliver mission success for our customers. Our Mission, Vision, and Values guide the way we do business serving government and commercial customers with smarter, more efficient digital and mission innovations.

The Leidos Digital Sector is seeking a highly skilled and experienced Information Assurance Analyst to ensure the confidentiality, integrity, and availability of information systems by managing the security and compliance framework across the enterprise cloud and network infrastructure. The Information Assurance Analyst serves as the subject matter expert on risk management and compliance, translating federal and DoD security directives into actionable controls and procedures. Also continuously monitors the security posture, manages vulnerabilities, and maintains the formal documentation required to achieve and sustain the Authority to Operate (ATO).

The Information Assurance Analyst will: Manage and maintain the security posture of enterprise cloud and network services throughout all phases of the Risk Management Framework (RMF) lifecycle. Conduct regular vulnerability scans of network and cloud assets using government-approved tools, analyze scan results, and coordinate with technical teams to prioritize remediation actions. Perform continuous monitoring and compliance validation of network devices, servers, and cloud resources against Security Technical Implementation Guides (STIGs) and other agency-specific benchmarks. Analyze and verify compliance within the enterprise cloud environment (e.g., AWS, Azure), ensuring alignment with FedRAMP controls and proper implementation of the shared responsibility model. Develop, update, and maintain all necessary RMF documentation, including the System Security Plan (SSP), security control traceability matrices, and Plans of Action and Milestones (POA&M). Serve as a primary point of contact for internal and external security audits, responsible for gathering and presenting evidence of control implementation to auditors. Track, interpret, and report on Information Assurance Vulnerability Management (IAVM) directives, coordinating with technical teams to ensure timely remediation and reporting. Provide information assurance expertise and guidance to network and cloud engineering teams to ensure security controls are integrated into the design and implementation of new services (“security by design”).

Education and Experience: Requires a current Top Secret Security Clearance. Require BS degree with a minimum of 5 years of dedicated experience in Information Assurance or Cybersecurity. At least 2 years of experience of securing cloud environments (e.g., AWS, Azure) and a working knowledge of FedRAMP controls. Must hold a certification meeting DoD 8570/8140 IAM Level II requirements (e.g., CompTIA CASP+, CISM, or CISSP). Required Skills: Direct hands on application of the Risk Management Framework (RMF) from initiation to continuous monitoring. Experience conducting vulnerability assessments using tools such as ACAS, Nessus, or equivalent systems. Experience implementing and auditing systems against Security Technical Implementation Guides (STIGs).

Clearance Required: Must possess an active Top Secret security clearance at time of consideration.

ECNOMS If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares. Original Posting:

October 14, 2026 For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above. Pay Range:

Pay Range $87,100.00 - $157,450.00 The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.