Information Security Analyst - Journeyman

Quantum Sky; Honolulu (HI); On-site; USD 90,000 - 130,000; Full time

Job summary

Quantum Sky is seeking an Information Security Analyst - Journeyman with Red Team experience to support a DoD customer at Camp Smith in Hawaii. The role involves hands‑on continuous monitoring, vulnerability assessment, evidence management, remediation tracking, and security‑control validation for assigned systems and portfolios.

Responsibilities include performing security assessments, vulnerability scans, collecting evidence, validating findings, and coordinating POA&M updates across sites.

Qualifications

• DoD 8140 /cyberspace workforce qualification: IAT Level III or applicable CSSP/DCWF role.
• Certification: CISSP, CEH, or other Government‑accepted certification meeting the required 8140 work role.
• 3+ years conducting DoW network assessments.
• 5+ years performing secure code reviews.
• 2+ years performing penetration testing.
• 3+ years performing security evaluations.
• 1+ year experience supporting DoW expeditionary network environments of similar size and complexity to the Marine Corps Cyberspace Environment (MCCE).
• Ability to meet current DoW, DoN, and USMC privileged‑access, background investigation, training, and least‑privilege requirements.
• Experience with ACAS/Tenable, DISA STIGs, IAVM processes, RMF evidence development, POA&M workflows, and DoD/USMC network environments.

Responsibilities

• Support scheduled security control assessments and execute assessment procedures under approved scope and rules of engagement.
• Perform monthly vulnerability scanning and IAVM‑related analysis; review scan completeness, identify vulnerabilities, and track remediation status.
• Collect, normalize, verify, and maintain cybersecurity evidence, including logs, configurations, scan results, POA&Ms, prior findings, and change records.
• Monitor assigned systems for configuration drift and unauthorized changes and document results for senior review.
• Assist in validating false positives/negatives, retesting remediated items, and mapping findings to applicable controls/frameworks.
• Prepare technical inputs for assessment plans, findings, final reports, scan reports, configuration drift reports, and remediation trackers.
• Support POA&M updates, evidence repositories, action tracking, and cross‑site coordination.
• Maintain required clearance, DoD 8140 qualifications, privileged access, and mandatory training.

Skills

IAT Level III

CISSP/CEH

DoD 8140 experience

Vulnerability assessment

Penetration testing

RMF/ATO processes

Tools

ACAS/Tenable

DISA STIGs

IAVM processes

Job description

Quantum Sky is searching for a Information Security Analyst - Journeyman with Red Team experience to support a DoW customer at Camp Smith. This candidate will provide hands‑on continuous monitoring, vulnerability assessment, evidence management, remediation tracking, and security‑control validation for assigned customer's systems and portfolios.

Responsibilities:

• Support scheduled security control assessments and execute assessment procedures under approved scope and rules of engagement.
• Perform monthly vulnerability scanning and IAVM‑related analysis; review scan completeness, identify vulnerabilities, and track remediation status.
• Collect, normalize, verify, and maintain cybersecurity evidence, including logs, configurations, scan results, POA&Ms, prior findings, and change records.
• Monitor assigned systems for configuration drift and unauthorized changes and document results for senior review.
• Assist in validating false positives/negatives, retesting remediated items, and mapping findings to applicable controls/frameworks.
• Prepare technical inputs for assessment plans, findings, final reports, scan reports, configuration drift reports, and remediation trackers.
• Support POA&M updates, evidence repositories, action tracking, and cross‑site coordination.
• Maintain required clearance, DoD 8140 qualifications, privileged access, and mandatory training.

Required:

• DoD 8140 /cyberspace workforce qualification: IAT Level III or applicable CSSP/DCWF role.
• Certification: CISSP, CEH, or other Government‑accepted certification meeting the required 8140 work role.
• 3+ years conducting DoW network assessments.
• 5+ years performing secure code reviews.
• 2+ years performing penetration testing.
• 3+ years performing security evaluations.
• 1+ year experience supporting DoW expeditionary network environments of similar size and complexity to the Marine Corps Cyberspace Environment (MCCE).
• Ability to meet current DoW, DoN, and USMC privileged‑access, background investigation, training, and least‑privilege requirements.
• Experience with ACAS/Tenable, DISA STIGs, IAVM processes, RMF evidence development, POA&M workflows, and DoD/USMC network environments.

Required Training / Administrative Readiness:

• Complete and maintain required initial/annual NIPRNET account training, including Cyber Awareness, OPSEC, and Privacy/PII.
• Complete applicable SIPRNET training, including Derivative Classification and local SIPRNET user agreements; NATO Secret briefing if mission‑required.
• Complete annual CUI training and local installation/security briefings.
• Maintain required CAC/DBIDS/site‑access credentials and comply with DISS visit request requirements.
• Maintain valid passport/visa/driver documentation when required by the duty location or travel assignment.

Performance Expectations:

• Produce complete, accurate, evidence‑traceable assessment products in accordance with the SOW, approved QCP, Government formats, and established delivery timelines.
• Escalate critical/high or mission‑impacting issues through Quantum Sky program leadership in accordance with the approved governance and escalation process.
• Protect classified information, CUI, Government property, credentials, and assessment data in accordance with contract and local security requirements.
• Operate within the non‑personal‑services construct; Government personnel provide requirements, priorities, surveillance, and acceptance, while Quantum Sky management directs contractor personnel.

Clearance: Secret clearance required with the ability to upgrade to a Top Secret