Information Assurance & Security Analyst

Salary: $85,000 - 125,000 per year Requirements:

• We require a full-time W-2 employee; 1099 and corp-to-corp arrangements are not accepted.
• We require on-site work at our Fairfax, Virginia headquarters and DLA HQ.
• You must hold and maintain an active Secret clearance in DISS, with eligibility for SIPR/NIPR network access at a minimum.
• You must have a bachelors degree in Cloud Engineering, Computer Science, Engineering, Information Systems, or a related discipline.
• You must maintain a current DoDD 8140/8570 certification for a cybersecurity workforce role, such as Security+, CISSP, CISM, or an equivalent credential.
• You should have strong proficiency with STIGs, RMF documentation and processes, SCAP, ACAS scans, and vulnerability assessment/CCRI activities.
• You should have experience with OS hardening, patch management, and sustainment aligned to DoD security policy.
• You should have experience securing Oracle databases and JAVA/J2EE web-based environments.
• You should have a solid background in producing IA/cybersecurity documentation, POA&Ms, and audit materials.
• Preferred qualifications include advanced cybersecurity certifications such as CISSP, CISM, or CASP+.
• Preferred qualifications include a bachelors degree or higher in Cybersecurity, Information Assurance, Computer Science, or a related field.
• Preferred qualifications include DHS Trusted Tester Certification (508).
• Preferred qualifications include experience supporting DoD cybersecurity programs, especially with DLA, DISA, or Combatant Commands.
• Preferred qualifications include familiarity with Wildfly Elytron and DoD-mandated authentication integrations.
• Preferred qualifications include cloud security experience with AWS and hybrid cloud/on-premises RMF implementation.
• Preferred qualifications include experience supporting large-scale, mission-critical web applications and reporting environments in DoD or similar organizations.
• Preferred qualifications include experience creating security training and documentation for varied audiences.
• Preferred qualifications include excellent interpersonal and written and verbal communication skills.

• We monitor, assess, and maintain continuous compliance with DoD, DLA, and RMF security requirements across cloud and on-premises environments.
• We run and sustain continuous monitoring activities, including vulnerability identification, risk assessment, remediation tracking, and posture reporting.
• We perform and support ACAS scanning, CVA assessments, CCRI preparation and execution, and internal and external security audits.
• We prepare, review, and maintain RMF artifacts such as SSPs, control implementations, risk assessments, and POA&Ms.
• We support audit readiness and coordinate with DLA CERT, IA personnel, and enterprise security teams.
• We participate in configuration and change management to evaluate security impacts and support authorization decisions.
• We assist with security incident response, root cause analysis, corrective actions, and required reporting.
• We embed with Agile and DevSecOps teams to provide security input through requirements, design, development, testing, and deployment.
• We collaborate with product owners, developers, and testers to define and refine security and compliance requirements.
• We support application security testing, including functional validation, regression testing, and coordination of automated and manual testing.
• We advise on the implementation, integration, and sustainment of COTS and GOTS solutions, including web applications, microservices, APIs, and data interfaces.
• We review the security impact of application changes, enhancements, and technical refresh efforts, and recommend risk-based mitigations.
• We participate in DevSecOps pipeline activities, including security tool integration, defect tracking, and remediation workflows.
• We develop and deliver security training and awareness materials, such as quick reference guides, job aids, and system-specific documentation.
• We support R&D and modernization efforts to improve application security, automation, and system resilience.

• AWS
• Cloud
• DevSecOps
• Support
• Java
• Network
• Oracle
• Security
• Web
• microservices
• Java EE

More:

We are PioneerTech, a recognized leader in innovative technology, cybersecurity, and program management solutions for Federal agencies. We support the Department of Defense and other Federal clients with enterprise IT, data analytics, and cybersecurity capabilities that protect mission-critical systems. Our culture is collaborative and focused on professional growth, thought leadership, and operational excellence. This is an immediate, in-person opportunity based in Fairfax, Virginia, with an 8-hour Monday-to-Friday schedule during core hours of 07:30 to 17:30. We offer a competitive benefits package that includes 401(k), 401(k) matching, dental, health, life, and vision insurance, paid time off, and tuition reimbursement.

last updated 38 week of 2026