Job Title: Information Assurance Analyst II Reports to: Program Manager Work Location: Manassas, VA | Crystal City, VA | Remote %: 0% FLSA Status: Salary (Exempt) Job Summary: The Information Assurance Analyst II is responsible for supporting the implementation and maintenance of security controls within an environment that includes domestic and international infrastructures and data centers. This role contributes to the organization s cybersecurity posture by assisting with risk assessments, security audits, and compliance efforts as part of a large enterprise effort on a federal contract. The Information Assurance Analyst collaborates with senior team members to ensure systems are secure, compliant, and properly configured according to federal regulations. Job Responsibilities: Support the implementation and maintenance of security controls in compliance with federal regulations and standards. Assist in conducting risk assessments, vulnerability assessments, and security audits to identify security gaps. Help develop and maintain security documentation, including system security plans and risk assessments. Monitor security events using Security Information and Event Management (SIEM) tools and assist with incident analysis. Work with IT and engineering teams to incorporate security requirements into system configurations and designs. Assist in the continuous monitoring of systems to ensure compliance with NIST, FISMA, RMF, and other security standards. Participate in incident response activities, including identifying, reporting, and helping to resolve security incidents. Contribute to the development and delivery of security awareness training for staff. Support compliance audits and assessments, providing documentation and evidence as needed. Collaborate with senior analysts to identify improvements and strengthen security controls. Qualifications: In accordance with , will not consider candidates for this position who do not meet the aforementioned conditions. Minimum of 3 years of experience in information assurance, cybersecurity, or a related discipline. Familiarity with federal security standards, including NIST SP 800-53, RMF, and FISMA requirements. Experience using security tools such as SIEM platforms (e.g., Splunk, ArcSight), vulnerability scanners (e.g., Nessus, Qualys), and endpoint security solutions. Knowledge of security controls implementation for cloud (AWS, Azure), on-premises, or hybrid environments. Understanding of STIG compliance and vulnerability management practices. Exposure to scripting languages (e.g., Python, PowerShell) for automating security tasks is a plus. Understanding of network security principles, firewall configuration, IDS/IPS, and encryption methods. Strong analytical skills, with the ability to assist in the identification and mitigation of security risks. Good communication skills with the ability to work effectively in a team environment and support senior analysts. Certifications such as Security+, CAP, or CySA+ are preferred. Other: Must have an active Top Secret with SCI eligibility. Will be subject to a federal background investigation. Physical Demands and Working Conditions: Listed below are the physical or mental requirements necessary for the job's performance. Reasonable accommodation may be made to enable individuals with disabilities to perform essential job functions: Prolonged periods of computer desk work. Dexterity of hands and fingers to operate a computer keyboard and other computer components. Speaking and hearing are sufficient to converse and understand conversations, both in-person, telephone, and virtual meetings. The cognitive skills needed to complete tasks, including abilities such as learning, remembering, focusing, categorizing, and integrating information for decision-making, problem-solving, and comprehending. Ability to learn new tasks, remember processes, maintain focus, complete tasks independently, make timely decisions in the context of a workflow, and the ability to communicate with managers and co-workers. Mental aptitude to respond appropriately in high-pressure situations or deadline-driven environments. Maintain a professional emotional response when working with others. This job description reflects management's overview of essential functions and responsibilities. It is not intended to be all-inclusive of job duties that may be assigned. We would love to have you join our team! ECCO Select is committed to hiring and retaining a diverse workforce. ECCO Select s policy is to provide equal opportunity to all people without regard to race, color, religion, national origin, ancestry, marital status, veteran status, age, disability, pregnancy, genetic information, citizenship status, sex, sexual orientation, gender identity or any other legally protected category. Equal Employment Opportunity is The Law This Organization Participates in E-Verify |