Quantum Sky is seeking a highly skilled Information Security Analyst to support the Defense Health Agency (DHA) Enterprise Operations & Support Services (EOSS) contract. Operating within a secure, cloud-hosted enclaved environment (DoD Impact Level 4), you will monitor, analyze, and respond to security events, manage vulnerabilities, and keep systems compliant with DoW cybersecurity requirements under the Risk Management Framework (RMF). To include, interpreting the outputs of enterprise cybersecurity tools—specifically Splunk, Endpoint Security Suites, and the Assured Compliance Assessment Solution (ACAS). You will analyze server logs, perform system-level audits, track configuration drifts against DISA STIG baselines, and report continuous compliance data directly to the Information System Security Officer (ISSO).

Responsibilities

• Monitor SIEM (e.g. Splunk) and endpoint tools (e.g., CrowdStrike/Trellix/HBSS successors) to detect, triage and escalate security events.
• Analyze vulnerability scans with ACAS/Tenable; track findings and remediation through POA&Ms.
• Verify DISA STIGs and SRGs using SCAP and STIG Viewer. Assess compliance, document deviations, and assist in remediation efforts.
• Review audit logs and system configurations for anomalies, unauthorized changes and policy violations.
• Support incident response: collect evidence, document timelines and write incident reports.
• Track and implement IAVMs, CTOs, TASKORDs and other directives within required timelines.
• Assist the ISSO with RMF artifacts, continuous monitoring and annual reviews in eMASS.
• Brief findings and risk to technical staff and leadership in clear, actionable terms.

Required:

• DoD 8140 Cyber Workforce Certification (e.g., CompTIA Security+ CE, CompTIA Cloud+, GSEC, CCSP, or SSCP) for the assigned work role (DCWF 541 – Vulnerability Assessment Analyst) at time of hire.
• Public Trust or higher, U.S. citizenship required.
• Hands-on experience with vulnerability scanning, STIG compliance and security monitoring tools.
• Working knowledge of NIST SP 800-53, RMF (NIST SP 800-37 / DoDI 8510.01) and DoW security policy.
• A minimum of 3-years of direct experience in Information Assurance, cybersecurity monitoring, and/or vulnerability management.

Desired:

• Experience with eMASS, ACAS/Tenable, and Splunk.
• Familiarity with Windows Servers, Red Hat Enterprise Linux, Oracle Databases, and/or network security devices.
• Direct experience implementing and auditing DISA STIGs and managing RMF accreditation packages (IATO/ATO)

Clearance: 

• Active or favorably adjudicated Tier 3 (T3) / NACLC investigation (SF-86) granting Secret clearance eligibility.

• Must be able to obtain and maintain an active Common Access Card (CAC) and DHA IT-II privileged access designation prior to network onboarding.

Location:

• Aurora, CO

Compensation:

• Compensation is unique to each candidate and relative to the skills and experience they bring to the position. The salary range for this position is typically between $104,000-$145,000. This does not guarantee a specific salary as compensation is based upon multiple factors such as education, experience, certifications, and other requirements, and may fall outside of the above-stated range.

Benefits: