Information Security Analyst (Pipeline)
At a glance
Mid-level Security Operations & Analysis role at Lucayan Technology Solutions LLC. Remote, United States · full-time · no salary stated · we estimate $97,875–$157,850 across the United States.
Lucayan Technology Solutions LLC has not published a salary for this role. The figure below is our estimate, not theirs.
remoteroles summary, based on the employer's posting.
What you'll do
- Scan systems for vulnerabilities, check them against STIGs, and monitor security compliance
- Track identified weaknesses through POA&Ms and keep them aligned with DoD deadlines
- Help prepare RMF records and ATO packages in eMASS
- Assist with cyber incident reporting and response, plus external assessments, audits, and penetration tests
- Keep compliance and workforce qualification records current, and help with privacy impact reviews
What you bring
- U.S. citizenship and at least a T3 security clearance
- A relevant bachelor's degree or a DoD IA baseline credential, with Security+ or an equivalent required
- Three to five years in information security for a federal or DoD setting
- Working knowledge of NIST SP 800-53, RMF and STIG requirements, plus hands-on vulnerability scanning experience
Who this fits
This suits a mid-level analyst comfortable with federal or DoD security work and core business hours, including on-call availability. The role is remote within the United States, with Tampa Bay candidates preferred; Tampa-based employees may later move to a hybrid schedule with periodic onsite work. This is a pipeline posting, so contact may come as future openings arise.
From the employer
About Lucayan Technology Solutions LLC
At Lucayan Technology Solutions LLC, we deliver secure, innovative solutions in support of national defense and intelligence missions. As a trusted government contracting partner, we provide top-tier intelligence and technology services that safeguard our nation. Our team is mission-driven, and we are committed to building careers that matter.
Location: This is a US-based remote position, with candidates in the Tampa Bay area preferred.
- Tampa-based employees may have the possibility of transitioning to a hybrid schedule in the future, requiring periodic onsite presence at our Tampa, FL location.
Employment Type: Full-Time Core business hours with on-call availability
Security Clearance: minimum T3 required
Status: Talent Pool
Join Our Pipeline for Future Opportunities!
This posting is intended to establish a pool of qualified candidates for future openings supporting ongoing operations. Positions may become available based on staffing needs, operational requirements, or workforce changes. Qualified applicants may be contacted as opportunities arise.
Job Summary
We are seeking a skilled Information Security Analyst to support cybersecurity compliance and vulnerability management activities for a federal government IT program. You will perform security assessments, manage POA&Ms, support RMF documentation, and contribute to maintaining the security posture of enterprise systems in a DoD environment.
Key Responsibilities
● Perform vulnerability scanning, STIG assessments, and security compliance monitoring
● Develop and manage POA&Ms for identified vulnerabilities in compliance with DoD timelines
● Support RMF documentation and ATO package development in eMASS
● Assist with cyber incident identification, reporting, and response activities
● Support external security assessments, audits, and penetration tests
● Maintain security compliance documentation and cybersecurity workforce qualification records
● Assist with Privacy Impact Assessments and information protection compliance monitoring
Required Qualifications
- U.S. Citizenship required
- Security Clearance: minimum T3 required
- Bachelor's degree in a relevant field OR DoD 8570/8140 IA baseline certification
- Minimum 3–5 years of information security experience in a federal or DoD environment
- Working knowledge of NIST SP 800-53, RMF, and STIG compliance requirements
- Hands-on experience with ACAS, SCC/SCAP, or similar vulnerability scanning tools
Preferred Qualifications
● Security+, CEH, or equivalent DoD 8570 certification
● eMASS experience for RMF package support
● Familiarity with application security scanning tools (Fortify, Sonatype, BurpSuite)
● Knowledge of federal privacy compliance requirements
Certifications
● DoD 8570 baseline certification required (Security+ or equivalent)
Security Operations & Analysis work from LinkedIn, X, Reddit and Upwork, in one list.
Each morning you get everything that fits, strongest first.
Security Operations & AnalysisRemote
Find me workBy the team behind remoteroles.