Information Security Analyst

Quantum Sky; Aurora (CO); On-site; USD 104,000 - 145,000; Full time

Benefits offered by this job

Health/Dental/Vision

401(k) match

Paid Time Off

STD/LTD/Life Insurance

Referral Bonuses

Professional development reimbursement

Parental leave

Job summary

Quantum Sky is seeking an Information Security Analyst to support the DHA EOSS contract in a secure, cloud-hosted DoD enclave. You will monitor, analyze, and respond to security events, manage vulnerabilities, and ensure RMF compliance.

Responsibilities include using Splunk and ACAS/Tenable for risk assessment, validating DISA STIGs, and assisting the ISSO with RMF artifacts in eMASS. This role requires CI/US citizenship and Tier 3 clearance readiness.

Qualifications

• DoD 8140 Cyber Workforce Certification required at hire.
• U.S. citizenship or Public Trust clearance required.
• Experience with vulnerability scanning, STIG compliance, and security monitoring tools.
• Knowledge of NIST SP 800-53, RMF (NIST 800-37 / DoDI 8510.01) and DoW policy.
• Minimum 3 years in information assurance, cybersecurity monitoring or vulnerability management.

Responsibilities

• Monitor SIEM (Splunk) and endpoint tools to detect, triage and respond to security events.
• Analyze vulnerability scans with ACAS/Tenable; track findings and remediation through POA&Ms.
• Verify DISA STIGs and SRGs using SCAP and STIG Viewer; document deviations and remediation.
• Review audit logs and system configurations for anomalies, unauthorized changes and policy violations.
• Support incident response: collect evidence, document timelines and write incident reports.
• Track IAVMs, CTOs, TASKORDs and other directives within required timelines.
• Assist the ISSO with RMF artifacts, continuous monitoring and annual reviews in eMASS.
• Brief findings and risk to technical staff and leadership in clear, actionable terms.

Skills

Vulnerability scanning

STIG compliance

Security monitoring tools

RMF

NIST SP 800-53

Discipline of information assurance

Education

DoD 8140 Cyber Workforce Certification

Tools

Splunk

CrowdStrike

Trellix

HBSS successors

ACAS

Tenable

Job description

Description

Quantum Sky is seeking a highly skilled Information Security Analyst to support the Defense Health Agency (DHA) Enterprise Operations & Support Services (EOSS) contract. Operating within a secure, cloud-hosted enclaved environment (DoD Impact Level 4), you will monitor, analyze, and respond to security events, manage vulnerabilities, and keep systems compliant with DoW cybersecurity requirements under the Risk Management Framework (RMF). To include, interpreting the outputs of enterprise cybersecurity tools—specifically Splunk, Endpoint Security Suites, and the Assured Compliance Assessment Solution (ACAS). You will analyze server logs, perform system-level audits, track configuration drifts against DISA STIG baselines, and report continuous compliance data directly to the Information System Security Officer (ISSO).

Responsibilities

• Monitor SIEM (e.g. Splunk) and endpoint tools (e.g., CrowdStrike/Trellix/HBSS successors) to detect, triage and escape? Wait this line was wrong; we need original wording.
• Monitor SIEM (e.g. Splunk) and endpoint tools (e.g., CrowdStrike/Trellix/HBSS successors) to detect, triage and ...
• Analyze vulnerability scans with ACAS/Tenable; track findings and remediation through POA&Ms.
• Verify DISA STIGs and SRGs using SCAP and STIG Viewer. Assess compliance, document deviations and assist in remediation efforts.
• Review audit logs and system configurations for anomalies, unauthorized changes and policy violations.
• Support incident response: collect evidence, document timelines and write incident reports.
• Track and implement IAVMs, CTOs, TASKORDs and other directives within required timelines.
• Assist the ISSO with RMF artifacts, continuous monitoring and annual reviews in eMASS.
• Brief findings and risk to technical staff and leadership in clear, actionable terms.

Qualifications

Required:

• DoD 8140 Cyber Workforce Certification (e.g., CompTIA Security+ CE, CompTIA Cloud+, GSEC, CCSP, or SSCP) for the assigned work role (DCWF 541 – Vulnerability Assessment Analyst) at time of hire.
• Public Trust or higher, U.S. citizenship required.
• Hands‑on experience with vulnerability scanning, STIG compliance and security monitoring tools.
• Working knowledge of NIST SP 800‑53, RMF (NIST SP 800‑37 / DoDI 8510.01) and DoW security policy.
• A minimum of 3-years of direct experience in Information Assurance, cybersecurity monitoring, and/or vulnerability management.

Desired:

• Experience with eMASS, ACAS/Tenable, and Splunk.
• Familiarity with Windows Servers, Red Hat Enterprise Linux, Oracle Databases, and/or network security devices.
• Direct experience implementing and auditing DISA STIGs and managing RMF accreditation packages (IATO/ATO)

Clearance:

• Active or favorably adjudicated Tier 3 (T3) / NACLC investigation (SF-86) granting Secret clearance eligibility.

• Must be able to obtain and maintain an active Common Access Card (CAC) and DHA IT-II privileged access designation prior to network onboarding.

Location:

• Aurora, CO

About Quantum Sky

Compensation:

• Compensation is unique to each candidate and relative to the skills and experience they bring to the position. The salary range for this position is typically between $104,000-$145,000. This does not guarantee a specific salary as compensation is based upon multiple factors such as education, experience, certifications, and other requirements, and may fall outside of the above‑stated range.

Benefits:

• Highlights of our benefits include Health/Dental/Vision, 401(k) match, Paid Time Off, STD/LTD/Life Insurance, Referral Bonuses, professional development reimbursement, and parental leave.

The world the mission operates in is going post‑quantum, contested, and machine‑speed. Quantum Sky engineers the advantage across cyber, networks, software, and quantum because the mission demands dominance, not parity. We don't follow the map. We draw it.

At Quantum Sky, we believe that success starts with our people. We foster a collaborative, innovative, and mission‑driven environment where every team member plays a critical role in shaping the future of technology. Are you ready to join #TeamQuantumSky?

Quantum Sky Engineering LLC is an Equal Opportunity Employer; all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, [sexual orientation, gender identity,] national origin, disability, status as a protected veteran, or any characteristic protected by applicable law.