Information Security Analyst Jobs in District of Columbia
Information Security Analyst jobs in District of Columbia are among the most active markets in the country, concentrated in federal contracting, defense agencies, and financial services across Washington D.C. proper. The heaviest hiring comes from established employers like Booz Allen Hamilton, Leidos, and SAIC, with strong demand at every level from junior analysts to senior architects holding clearances. Incident response, cloud security, and compliance with federal frameworks like FedRAMP and FISMA are the most sought-after specialties. Scan the live roles below and apply to whichever ones fit.
Find JobsOverview
Showing 5 of 74+ Information Security Analyst jobs
Tharros is seeking a Senior Information Systems Security Officer to support a DHS Intelligence and Analysis cybersecurity program in the National Capital Region.
This role will support ISSO operations across a complex Federal cybersecurity environment, including Assessment and Authorization, continuous monitoring, ATO package maintenance, POA&M management, security artifact quality, cloud and hybrid system support, and cybersecurity compliance. The ideal candidate is a hands-on ISSO who can maintain accurate authorization evidence, coordinate with technical teams, and help keep mission systems secure, compliant, and authorization-ready.
Responsibilities:
- Perform ISSO duties for assigned Federal information systems.
- Support RMF activities, including system categorization, control implementation support, assessment readiness, authorization package maintenance, and ongoing monitoring.
- Develop, review, validate, and maintain security artifacts such as SSPs, POA&Ms, risk exceptions, contingency plans, privileged user documentation, and privacy-related artifacts.
- Create, maintain, and monitor ATO packages in GRC tools.
- Support POA&M development, validation, remediation tracking, exception documentation, closure, and reporting.
- Collaborate with system owners, ISSOs, ISSMs, developers, engineers, assessors, and other stakeholders to address vulnerabilities, security findings, and remediation actions.
- Review vulnerability scan results and support recurring continuous monitoring activities.
- Support audit log review, alert response, and documentation of follow-up actions.
- Ensure assigned systems remain aligned with applicable cybersecurity policies, procedures, and decommissioning requirements.
- Support quarterly cybersecurity performance and compliance reporting.
- Provide ISSO support across hybrid environments, including classified and unclassified on-premise systems, cloud-based systems, DevSecOps environments, and agile development teams.
- Support security for operating systems and technologies including Linux, Windows, open-source operating systems, and cloud platforms.
- Support Cross Domain Solution security governance, assessment, and authorization activities.
- Help improve ISSO workflows, evidence management, POA&M tracking, continuous monitoring, and risk reporting through automation and repeatable processes.
- Translate compliance status, vulnerability data, and remediation progress into clear updates for technical and leadership stakeholders.
Requirements:
- Active Top Secret clearance with contingency on DOD CAS granting SCI eligibility.
- 10+ years of related cybersecurity experience.
- At least 2 years of recent experience in A&A, FISMA compliance, IC cybersecurity policy and standards, continuous monitoring, CDS, and secure cloud and hybrid engineering.
- Experience applying NIST 800 series, CNSSI 1253, security controls, and RMF principles.
- Experience with emerging security risk management practices, including automation of A&A and continuous monitoring activities.
- CISM, CAP, or GRC certification, or comparable demonstrable experience.
- Experience developing, reviewing, or maintaining SSPs, POA&Ms, risk exceptions, contingency plans, privileged user documentation, ATO packages, and continuous monitoring evidence.
- Experience working with GRC tools and coordinating with technical teams to remediate vulnerabilities and maintain authorization readiness.
- Strong written and verbal communication skills.
- Ability to work onsite at a Government-approved location as required.
Preferred Qualifications:
- Prior DHS, Intelligence Community, DoD, CISO office, ISSM, AO, SCA, or national security ISSO experience.
- Experience supporting large ISSO portfolios, classified systems, hybrid cloud environments, DevSecOps evidence collection, continuous monitoring, and audit readiness.
- Experience with Archer, eMASS, Xacta, ACAS, Tenable.sc, Splunk, GitLab, Axonius, STIG/SCAP validation, or related Federal cybersecurity tools.
- Experience with AWS, Microsoft Azure, Microsoft 365, or other cloud platforms.
- Experience supporting TS/SCI, SCIF, cross-domain, or secure mission environments.
See All 74 Information Security Analyst Jobs in District of Columbia
Find roles in District of Columbia that match your experience and apply in just a few clicks.
Find JobsInformation Security Analyst Jobs by City in District of Columbia
Where District of Columbia roles are concentrated, by current openings.
Information Security Analyst Job Market in District of Columbia
A snapshot from current District of Columbia openings, updated as new roles post.
Who's Hiring
What District of Columbia Employers Look For
The qualifications that appear most often in information security analyst jobs across District of Columbia.
- Active security clearance at the Secret or Top Secret level required or preferred
- Bachelor's degree in cybersecurity, computer science, or a closely related field
- CISSP, Security+, or CISM certification expected for mid-level and senior roles
- Hands-on experience with SIEM platforms, endpoint detection, and vulnerability scanning tools
- Demonstrated knowledge of NIST, FedRAMP, and FISMA compliance frameworks
- Experience supporting federal government or defense contractor environments
Information Security Analyst Jobs in District of Columbia: Frequently Asked Questions
How do you become an information security analyst in District of Columbia?
There is no D.C.-specific state license required to work as an information security analyst, so the path runs through education and industry credentials. Most employers in D.C. expect at minimum a bachelor's degree in cybersecurity, computer science, or information systems, followed by certifications such as CompTIA Security+, CISSP, or CISM. Because the market is dominated by federal contractors and agencies, obtaining or being eligible for a government security clearance is often the single most important step for moving into the D.C. market.
How much do information security analysts make in District of Columbia?
Information security analysts in District of Columbia earn a median of about $135,090 a year, based on May 2025 Bureau of Labor Statistics wage data, ranging from around $86,280 for the lowest 10% to over $189,510 for the top 10%. Pay rises with experience, specialty, and employer.
Which companies hire information security analysts in District of Columbia?
Employers hiring information security analysts in District of Columbia right now include tharros, MANTECH, and Peraton, based on current listings on Migrate Mate as of November 2026. The D.C. market is heavily anchored by large federal contractors and defense firms with long-term government contracts that sustain consistent analyst hiring across cleared and uncleared roles.
Which District of Columbia cities have the most information security analyst jobs?
The cities with the most information security analyst openings in District of Columbia are Washington, Bolling AFB, and Pentagon. Washington D.C. itself drives the bulk of postings given its concentration of federal agencies, defense contractors, and financial regulators, while surrounding areas in the metro pull volume from major contractor campuses and intelligence community facilities that require a large cleared workforce.
Are there remote information security analyst jobs in District of Columbia?
Yes, and more than many fields, though it is not universal. About 45% of information security analyst openings tied to District of Columbia are remote or hybrid as of November 2026, reflecting the analytical and desk-based nature of much of the work. Roles involving compliance monitoring, threat intelligence, and policy tend to carry the most remote flexibility, while positions requiring hands-on access to classified networks or government facilities remain on-site.
How can I get hired as an information security analyst in District of Columbia with little or no experience?
The most realistic entry path in D.C. is through an associate or junior analyst role at a mid-size federal contractor, where training pipelines exist for candidates who hold a CompTIA Security+ certification and are eligible for a security clearance. Large contractors like Booz Allen Hamilton and Leidos run early-career programs specifically designed to bring in candidates without deep experience and put them through internal training tied to government contracts. Adjacent roles in IT support, network administration, or help desk at federal agencies also serve as common stepping stones, with internal transfers into security teams once foundational skills are demonstrated.
Where can I find and apply to information security analyst jobs in District of Columbia?
You can find and apply to information security analyst jobs in District of Columbia on Migrate Mate, which lists current D.C. openings updated in real time. Search the listings to find roles that match your experience level, clearance status, and specialty area, then apply directly to the ones that fit.
See All 74 Information Security Analyst Jobs in District of Columbia
Find roles in District of Columbia that match your experience and apply in just a few clicks.
Find Jobs