Principal Information Assurance Analyst

Leidos

. Support the Defense Enclave Services (DES) team and digital modernization program for DISA and DoD Fourth Estate Agencies .

Posted 10/9/2026full-timeRemote • United StatesLead💰 $131,300 - $237,350 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Risk Management Framework (RMF) activities, vulnerability assessments, and compliance with NIST standards. Proven ability to lead cybersecurity initiatives and mentor team members while ensuring adherence to security policies and requirements.

Highest-signal resume keywords

Risk Management Framework (RMF)Vulnerability Assessment ScansDoD 8570 IAT II CertificationEMASS and/or Xacta ExperienceCybersecurity Leadership

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Technical Security AssessmentsThreat AssessmentSecurity Design and ArchitectureInformation Assurance GuidelinesNetwork Service MigrationsZero-Trust PoliciesIPv6 ImplementationAudit and Accountability PlansCompliance DocumentationSystem Development Life Cycle (SDLC)

Soft Skills

Analytical SkillsProblem-Solving SkillsCollaborationMentoring

Tools & Technologies

Vulnerability Scanning ToolsNIST 800-37 Revision 2NIST SP 800-53DoDI 8510.01

Certifications & Qualifications

Active Secret Security ClearanceDoD 8570 IAT II CertificationCISSPCISACAP

Industry Keywords

Defense Enclave Services (DES)DISADoD Fourth Estate AgenciesInformation AssuranceCybersecurity

Tech Stack

Tools & technologies

Cyber SecuritySDLC

About the role

Key responsibilities & impact

Support the Defense Enclave Services (DES) team and digital modernization program for DISA and DoD Fourth Estate Agencies
Support engineering teams improving and scaling the DES single service provider integrated environment
Perform or review technical security assessments to identify vulnerabilities and non-compliance
Recommend mitigation strategies and develop approaches to secure environments
Assess threats and provide input on security designs and architectures
Perform Risk Management Framework (RMF) activities and participate in certification and accreditation risk assessments
Deliver enhanced DISA network capabilities, including Zero-Trust policies, network service migrations, wireless LAN modernization, and IPv6 implementation
Explain security policy implications of design decisions and document compliance for Authority to Operate submissions
Coordinate information assurance submissions with government ISSM counterparts
Lead cybersecurity submissions for engineering projects through design, testing, and deployment
Evaluate, develop, and implement information assurance guidelines and procedures
Perform vulnerability and risk analyses throughout the system development life cycle
Conduct IT security site surveys
Develop and deliver RMF accreditation packages and supporting artifacts in accordance with NIST 800-37 Revision 2
Provide input to Audit and Accountability Plans and access control policies aligned with NIST SP 800-53
Develop processes for evaluating and documenting vulnerabilities under DoDI 8510.01
Ensure information systems meet compliance requirements and resolve security violations
Establish information assurance and security requirements based on user, policy, regulatory, and resource demands
Perform vulnerability and assessment scans using multiple tools
Mentor team members
Monitor equipment and procedure updates to maintain IA requirements and business needs
Identify security requirements for handling Government data

Requirements

What you’ll need

Must hold an active Secret security clearance
US Citizenship required
Bachelor’s degree and 12+ years of experience; additional years of directly applicable experience may be accepted in lieu of a degree
Prior relevant experience working with RMF, serving in an ISSO, ISSO support, SCA representative, or similar role
Current DoD 8570 IAT II Certification is required (Sec+)
Experience performing various types of vulnerability and assessment scans with multiple tools
Experience using eMASS and/or Xacta
Solid understanding of the Risk Management Framework (RMF) and the System Development Life Cycle (SDLC)
Understanding of hardware and software engineering best practices
Demonstrated analytical and problem-solving skills
Must meet eligibility requirements for work assignment on specified contract
Must meet eligibility requirements following a government security investigation
Preferred: experience collaborating with diverse stakeholders to drive consensus and forward progress
Preferred: ability to identify needed process changes and implement continuous improvement solutions
Preferred: CISSP, CISA, and/or CAP certification
Preferred: ability to work successfully as part of a virtual team