Apply

Ready to go for it?

AI Apply speeds things up—apply directly if you prefer.

FREE ACCESS
5,000–10,000 jobs/day
JobTailor Logo

See all jobs on JobTailor

Search thousands of fresh jobs every day.

Discover
  • Fresh listings
  • Fast filters
  • No subscription required
Create a free account and start exploring right away.
IronArch Technology

Security Analyst

IronArch Technology

ATO Security Analyst maintaining cybersecurity compliance across VA research environments. Developing ATO packages and leading client-facing meetings for authorization processes.

Posted 6/19/2026full-timeRemote • 🇺🇸 United StatesMid-LevelSenior💰 $84,000 - $101,000 per yearWebsite

Tech Stack

Tools & technologies
Cyber Security

About the role

Key responsibilities & impact
  • Support the Department of Veterans Affairs in maintaining cybersecurity compliance across VA research environments.
  • Own the paperwork that keeps VA systems authorized and running: ATO and ATC packages, security artifacts, POA&Ms, gap analyses, and FISMA documentation.
  • Develop, review, and maintain ATO and ATC packages including system security plans (SSPs), control implementation statements, FISMA documents, and POA&Ms across a portfolio of VA research systems.
  • Own the tracking and resolution of open POA&M items, keep authorization schedules current.
  • Support all RMF steps from security categorization through authorization, coordinating with VA ISOs, ISSOs, site managers, and system owners to close gaps and hit deadlines.
  • Conduct security assessment reviews for VA research submissions, work within the VA's Continuous Authorization and Monitoring (CAM) framework, and support product installation planning for major system changes.
  • Lead client-facing meetings on ATO topics regularly.

Requirements

What you’ll need
  • Bachelor's degree in computer science, electronics engineering, or another engineering or technical discipline, plus 5 years of relevant experience.
  • 13 years of relevant experience may substitute in lieu of a degree (8 additional years may substitute for education per contract requirements).
  • Hands-on experience with the full RMF lifecycle, categorization through authorization.
  • Comfortable creating and maintaining SSPs, control implementation statements, POA&Ms, and FISMA security documentation without a lot of handholding.
  • Working knowledge of NIST SP 800-53 is a hard requirement.
  • Ability to read authorization documentation, find the gaps, build a plan to address them, and communicate it clearly.
  • Must be able to obtain and maintain a VA Public Trust or Suitability/Fitness determination.
  • U.S. citizenship required.

Benefits

Comp & perks
  • Competitive compensation and market-leading bonus opportunities
  • Medical, dental and vision benefits where a significant portion of the premium is subsidized by IronArch.
  • Company-provided healthcare concierge assistance to help explain your coverage in plain language; help you find, choose, and schedule quality care; and address billing, benefit, or claims concerns, potentially saving hours of your time
  • 401(k) retirement plan where the company contributes dollar for dollar up to 3 percent, and 50 cents on the dollar for the 4th and 5th percent with immediate entry and immediate vesting
  • 20 days of PTO accumulated per calendar year
  • 11 paid holidays
  • Bereavement, jury duty, parental (maternity/paternity/adoption), and military leaves
  • Sabbatical programs
  • Company-paid short- and long-term disability
  • Company-paid life insurance
  • Voluntary life, accidental and indemnity income replacement benefits
  • Professional development reimbursement
  • Health club reimbursement
  • Matching donation program and annual philanthropic activities
  • Pet insurance

ATS Keywords

✓ Tailor your resume
Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools
cybersecurity complianceATO packagesATC packagessecurity artifactsPOA&MsFISMA documentationsystem security plans (SSPs)control implementation statementsNIST SP 800-53RMF lifecycle
Soft Skills
communicationleadershiporganizationalproblem-solvingclient-facing meetings
Certifications
VA Public TrustSuitability/Fitness determination