Information Assurance Engineer Jobs
Information Assurance Engineer jobs are open across defense contractors, federal agencies, healthcare, and financial services, from entry-level analyst roles to senior and principal engineers, with specializations in risk management, compliance frameworks, and security controls. Scan the live roles below and apply to whichever ones fit.
Find JobsOverview
Showing 5 of 79+ Information Assurance Engineer jobs
About Peraton
Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees solve the most daunting challenges that our customers face. Visit peraton.com to learn how we’re keeping people around the world safe and secure.
About The Role
Position Overview
The Contractor Lead will provide governance, risk, and compliance (GRC) oversight across enterprise cybersecurity programs, with a primary focus on dashboarding, RMF reporting, assessment quality, and ensuring accurate data flows from cyber compliance tools. The role requires a seasoned professional capable of leading compliance operations, synthesizing complex security information for senior leadership, and coordinating with technical teams across multiple organizational units including geographically dispersed plants and laboratories to support enterprise-wide cybersecurity outcomes.
Drawing on experience in risk assessment, vulnerability scanning, compliance auditing, COMSEC operations, and secure communications management, the Contractor Lead will ensure that cybersecurity posture is accurately measured, effectively communicated, and continuously improved. The position will interface with federal division directors, cybersecurity teams, and mission stakeholders to maintain high standards of data integrity, reporting quality, and regulatory alignment.
Key Responsibilities
- Lead development and maintenance of enterprise GRC dashboards to provide meaningful, accurate visualization of compliance posture, vulnerabilities, risks, and RMF control status.
- Translate complex technical information into executive-level summaries and visual reports, leveraging experience communicating COMSEC and cybersecurity data to leadership.
- Ensure dashboards reflect real-time, authoritative data sources by validating integrity and relevance of feeds from vulnerability scanning tools, compliance repositories, and RMF systems.
- Oversee reporting across all steps of the Risk Management Framework, ensuring visibility into control inheritance, implementation status, and authorization milestones.
- Support structured reporting cycles using background in RMF-aligned risk assessments, compliance audits, and mitigation planning.
- Ensure cyber compliance tools provide accurate and relevant data for enterprise reporting; validate and troubleshoot data flows as needed.
- Apply experience managing inventories, access control, encryption devices, and audit logs to improve data quality from compliance tools.
- Oversee the quality of assessment and authorization (A&A) activities by developing standardized review procedures and ensuring documentation accuracy.
- Guide teams in interpreting control requirements, developing remediation plans, and validating evidence to support authorization decisions.
- Collaborate across departments, national laboratories, and plant sites to align compliance workflows and reporting expectations.
- Build productive relationships with senior leadership, technical staff, contractors, and compliance stakeholders to synchronize cybersecurity efforts.
- Mentor junior personnel and support process improvement initiatives that enhance the maturity of the GRC and RMF programs.
Qualifications
Required Qualifications:
- 10+ years of experience in cybersecurity governance, compliance, RMF execution, or related fields.
- Experience developing dashboards, compliance visualizations, or executive reporting products.
- Strong familiarity with RMF, GRC methodologies, vulnerability management tools, and compliance tracking systems.
- Demonstrated experience communicating cybersecurity requirements to leadership, peers, and subordinate personnel.
- Active TS clearance with SCI suitability and the ability to obtain Q.
- Ability to work collaboratively across geographically distributed sites and diverse mission environments.
Preferred Qualifications:
- Experience supporting DOE, DOE-IN, NNSA, or other high-security federal mission environments.
- Bachelor’s degree in cybersecurity, information assurance, or related discipline; advanced degree preferred.
- Experience in COMSEC management, access control, and configuration of encryption devices.
- Familiarity with contractor oversight, and performance monitoring.
- Experience conducting audits, vulnerability assessments, and compliance reviews.
- Experience improving cybersecurity programs through structured reporting and process standardization.
- Active DOE Q clearance and SCI.
Details
Target Salary Range: $135,000 - $216,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.
Benefits Statement: Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed at https://www.careers.peraton.com/benefits.
Application Statements: The application period for the job is estimated to be 30 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates. By applying to this job, you are expressing interest in the role and the Company. During the review of your application, you may be required to participate in an on-camera interview, as well as participate in a process to verify your identity. Use of artificial intelligence (AI) tools of any kind during Peraton interviews is strictly prohibited unless the candidate has obtained prior written authorization. All interview responses must be the candidate’s own.
EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.
About Peraton
Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees solve the most daunting challenges that our customers face. Visit peraton.com to learn how we’re keeping people around the world safe and secure.
About The Role
Position Overview
The Contractor Lead will provide governance, risk, and compliance (GRC) oversight across enterprise cybersecurity programs, with a primary focus on dashboarding, RMF reporting, assessment quality, and ensuring accurate data flows from cyber compliance tools. The role requires a seasoned professional capable of leading compliance operations, synthesizing complex security information for senior leadership, and coordinating with technical teams across multiple organizational units including geographically dispersed plants and laboratories to support enterprise-wide cybersecurity outcomes.
Drawing on experience in risk assessment, vulnerability scanning, compliance auditing, COMSEC operations, and secure communications management, the Contractor Lead will ensure that cybersecurity posture is accurately measured, effectively communicated, and continuously improved. The position will interface with federal division directors, cybersecurity teams, and mission stakeholders to maintain high standards of data integrity, reporting quality, and regulatory alignment.
Key Responsibilities
- Lead development and maintenance of enterprise GRC dashboards to provide meaningful, accurate visualization of compliance posture, vulnerabilities, risks, and RMF control status.
- Translate complex technical information into executive-level summaries and visual reports, leveraging experience communicating COMSEC and cybersecurity data to leadership.
- Ensure dashboards reflect real-time, authoritative data sources by validating integrity and relevance of feeds from vulnerability scanning tools, compliance repositories, and RMF systems.
- Oversee reporting across all steps of the Risk Management Framework, ensuring visibility into control inheritance, implementation status, and authorization milestones.
- Support structured reporting cycles using background in RMF-aligned risk assessments, compliance audits, and mitigation planning.
- Ensure cyber compliance tools provide accurate and relevant data for enterprise reporting; validate and troubleshoot data flows as needed.
- Apply experience managing inventories, access control, encryption devices, and audit logs to improve data quality from compliance tools.
- Oversee the quality of assessment and authorization (A&A) activities by developing standardized review procedures and ensuring documentation accuracy.
- Guide teams in interpreting control requirements, developing remediation plans, and validating evidence to support authorization decisions.
- Collaborate across departments, national laboratories, and plant sites to align compliance workflows and reporting expectations.
- Build productive relationships with senior leadership, technical staff, contractors, and compliance stakeholders to synchronize cybersecurity efforts.
- Mentor junior personnel and support process improvement initiatives that enhance the maturity of the GRC and RMF programs.
Qualifications
Required Qualifications:
- 10+ years of experience in cybersecurity governance, compliance, RMF execution, or related fields.
- Experience developing dashboards, compliance visualizations, or executive reporting products.
- Strong familiarity with RMF, GRC methodologies, vulnerability management tools, and compliance tracking systems.
- Demonstrated experience communicating cybersecurity requirements to leadership, peers, and subordinate personnel.
- Active TS clearance with SCI suitability and the ability to obtain Q.
- Ability to work collaboratively across geographically distributed sites and diverse mission environments.
Preferred Qualifications:
- Experience supporting DOE, DOE-IN, NNSA, or other high-security federal mission environments.
- Bachelor’s degree in cybersecurity, information assurance, or related discipline; advanced degree preferred.
- Experience in COMSEC management, access control, and configuration of encryption devices.
- Familiarity with contractor oversight, and performance monitoring.
- Experience conducting audits, vulnerability assessments, and compliance reviews.
- Experience improving cybersecurity programs through structured reporting and process standardization.
- Active DOE Q clearance and SCI.
Details
Target Salary Range: $135,000 - $216,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.
Benefits Statement: Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed at https://www.careers.peraton.com/benefits.
Application Statements: The application period for the job is estimated to be 30 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates. By applying to this job, you are expressing interest in the role and the Company. During the review of your application, you may be required to participate in an on-camera interview, as well as participate in a process to verify your identity. Use of artificial intelligence (AI) tools of any kind during Peraton interviews is strictly prohibited unless the candidate has obtained prior written authorization. All interview responses must be the candidate’s own.
EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.
Information Assurance Engineer Jobs by Experience Level
See All 79 Information Assurance Engineer Jobs
Find roles that match your experience and apply in just a few clicks.
Find JobsInformation Assurance Engineer Job Market
Who's Hiring
Top Industries Hiring
- Education
What Employers Look For
The qualifications that appear most often in information assurance engineer jobs.
- Active DoD Secret or Top Secret security clearance with eligibility for SCI access
- Hands-on experience applying the NIST Risk Management Framework to information systems
- Proficiency with security assessment and authorization tools such as eMASS or Xacta
- Certifications including CISSP, CompTIA Security+, CAP, or CISM as a condition of employment
- Bachelor's degree in cybersecurity, computer science, information systems, or a related field
- Experience writing system security plans, security assessment reports, and POA&Ms for federal systems
Tips for Your Information Assurance Engineer Job Search
Tailor your resume to clearance requirements
Many information assurance engineer postings specify a clearance level before listing technical skills. Lead your resume with your active clearance status and any polygraph endorsements so hiring managers and automated screeners flag you immediately rather than filtering you out.
List certifications in a dedicated section
Certifications like CISSP, CAP, Security+, and CISM are often mandatory qualifiers, not nice-to-haves. Place them in a clearly labeled section near the top of your resume so a recruiter scanning for compliance keywords finds them without reading the full document.
Apply early to roles that fit
Migrate Mate lists information assurance engineer openings from across the United States in one place, so you can find roles that match and apply directly to each listing.
Target postings by compliance framework
Filter your search by the framework you know best, whether that is RMF, NIST 800-53, FedRAMP, or CMMC. Employers hiring for a specific framework want deep hands-on experience, not broad familiarity, so matching your expertise to the posting's framework improves your callback rate.
Prepare for a technical panel interview
Information assurance engineer interviews typically include a panel with a security architect, a program manager, and sometimes a contracting officer. Practice explaining how you conducted a system authorization, wrote a security assessment report, and resolved a Plan of Action and Milestones item under time pressure.
Negotiate clearance sponsorship before accepting
If a role requires a clearance you don't currently hold, confirm in writing whether the employer will sponsor and fund the investigation before you give notice at your current job. Sponsorship timelines vary widely and can affect your start date and compensation structure.
Information Assurance Engineer Jobs: Frequently Asked Questions
Which companies are hiring the most information assurance engineers?
General Dynamics Mission Systems, Leidos, and MANTECH are hiring the most information assurance engineers right now, with openings concentrated in Maryland, Virginia, and District of Columbia, based on current listings on Migrate Mate as of November 2026. Demand is especially high among defense contractors and federal IT service providers.
How many information assurance engineer jobs are remote?
About 63% of information assurance engineer openings are fully remote or hybrid as of November 2026, though roles tied to classified systems or on-site government facilities are almost always on-site. Compliance-focused positions, such as policy writing, documentation, and framework assessments for unclassified systems, tend to offer the most remote flexibility.
How do you become an information assurance engineer?
Start by earning a bachelor's degree in cybersecurity, information systems, or computer science, then pursue a foundational certification like CompTIA Security+ to validate baseline knowledge. Gain hands-on experience through a helpdesk, IT support, or junior analyst role that exposes you to security tools and audit processes. From there, pursue a DoD clearance through an employer sponsor and work toward advanced certifications such as CISSP or CAP as you take on authorization and assessment responsibilities.
Can you get hired as an information assurance engineer with little or no experience?
Yes, some entry-level information assurance engineer roles exist, particularly at large defense contractors that hire recent graduates into associate or junior IA analyst positions. Having a CompTIA Security+ certification, familiarity with NIST documentation, and even a basic clearance from an internship or prior service role puts you ahead of other candidates with no hands-on background. Targeting roles that explicitly state they will sponsor a clearance investigation broadens your options further.
What does the information assurance engineer interview process look like?
The process typically starts with a recruiter screen to verify clearance status and certification requirements, followed by a technical interview where you walk through how you have applied the Risk Management Framework, written a system security plan, or resolved a Plan of Action and Milestones item. A final panel interview often includes a security architect or program lead who assesses your ability to communicate risk findings to non-technical stakeholders and work within a compliance deadline.
Where can I find and apply to information assurance engineer jobs?
You can find and apply to information assurance engineer jobs on Migrate Mate, which lists current openings from across the United States in one place. Search for roles that match your clearance level, certification, and framework experience, then apply directly to each listing that fits your background.
See All 79 Information Assurance Engineer Jobs
Find roles that match your experience and apply in just a few clicks.
Find Jobs