Location: This is a US-based remote position, with candidates in the Tampa Bay area preferred.
• Tampa-based employees may have the possibility of transitioning to a hybrid schedule in the future, requiring periodic onsite presence at our Tampa, FL location.
Employment Type: Full-Time Core business hours with on-call availability
Security Clearance: minimum T3 required
Job Summary
We are seeking a skilled Information Security Analyst to support cybersecurity compliance and vulnerability management activities for a federal government IT program. You will perform security assessments, manage POA&Ms, support RMF documentation, and contribute to maintaining the security posture of enterprise systems in a DoD environment.
Key Responsibilities
Perform vulnerability scanning, STIG assessments, and security compliance monitoring
Develop and manage POA&Ms for identified vulnerabilities in compliance with DoD timelines
Support RMF documentation and ATO package development in eMASS
Assist with cyber incident identification, reporting, and response activities
Support external security assessments, audits, and penetration tests
Maintain security compliance documentation and cybersecurity workforce qualification records
Assist with Privacy Impact Assessments and information protection compliance monitoring
Required Qualifications
• U.S. Citizenship required
• Security Clearance: minimum T3 required
• Bachelor's degree in a relevant field OR DoD 8570/8140 IA baseline certification
• Minimum 3–5 years of information security experience in a federal or DoD environment
• Working knowledge of NIST SP 800-53, RMF, and STIG compliance requirements
• Hands-on experience with ACAS, SCC/SCAP, or similar vulnerability scanning tools
Preferred Qualifications
Security+, CEH, or equivalent DoD 8570 certification
eMASS experience for RMF package support
Familiarity with application security scanning tools (Fortify, Sonatype, BurpSuite)
Knowledge of federal privacy compliance requirements
Certifications
DoD 8570 baseline certification required (Security+ or equivalent)
Remote
Skills:
Applications Security, Computer Security, DoD Directive 8140, DoD Directive 8570, Documentation, Enterprise Protection, Federal Government, Information Technology & Information Systems, Information/Data Security (InfoSec), Internet Security, Maintain Compliance, Penetration Testing, Privacy Impact Assessment (PIA), Regulatory Compliance, Security Analysis, Security Auditing, Security Clearance, Security Compliance, Security Monitoring, Support Documentation, T-3 / DS3, U.S. National Institute of Standards and Technology (NIST), United States Citizen, United States Department of Defense (DoD), Vulnerability Scanners
undefined:
Lucayan Technology Solutions