An average day:
As IInformation Assurance Analyst II, you will support cybersecurity operations and compliance activities to help maintain secure, compliant, and properly authorized information systems. The Information Assurance Analyst II collaborates with senior team members to ensure systems are secure, compliant, and properly configured according to federal regulations. Additionally, in this position you will:
- Perform STIG compliance reviews, support internal security control assessments, assist with A&A/RMF activities, and support remediation actions to help maintain secure and compliant systems.
- Apply DoD cybersecurity policies, standards, and security principles to support the protection of classified IT systems and maintain compliance with applicable requirements.
- Assist in continuous monitoring activities to assess security control effectiveness, track vulnerability and compliance status, and support reporting in accordance with NIST and DoD requirements.
- Participate in incident response activities, including identifying, reporting, and helping to resolve security incidents.
- Perform risk analysis for system changes, contribute to the Risk Management Framework process and recommend security solutions to address any identify gaps.
- Ensure all system documentation is up to date.
- Manage and maintain POA&Ms by tracking remediation efforts, validating closure evidence, communicating risk, and supporting timely resolution of identified vulnerabilities.
- Oversee Configuration Management: Manage changes to security-relevant software, hardware, and firmware to maintain system security.
- May require occasional travel for audits or inspections.