Senior DoD RMF/Red Team Security Analyst

Quantum Sky; Quantico (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

Quantum Sky is seeking an Information Security Analyst - SME with Red Team experience to support a DoD customer at Quantico. This senior cybersecurity expert will lead RMF assessments, advanced vulnerability analysis, security evaluation, and mission-impact risk assessment for assigned East Coast portfolios.

Responsibilities include conducting complex security control assessments, performing vulnerability analysis and authorized penetration testing, reviewing evidence, and developing feasible

Qualifications

• DoD 8140 IAT Level III or CSSP/DCWF role required.
• CISSP, CEH or government-accepted certs meeting 8140.
• 3+ years DoW network assessment experience.
• 5+ years secure code review experience.
• 2+ years penetration testing.
• 3+ years security evaluations.
• 1+ year DoW expeditionary network environment support.
• Ability to meet privileged-access and background requirements.

Responsibilities

• Lead complex security control assessments and RMF/NIST alignment.
• Perform advanced vulnerability analysis, testing, and evaluation.
• Review findings for sufficiency and mapping before release.
• Develop mitigation strategies, POA&M, and remediation plans.
• Lead assessment planning, ROE development, and final reports.
• Support AO control-effectiveness reporting and risk statements.
• Provide technical leadership and reach-back support to peers.
• Contribute to SOPs, lessons learned, and evidence standards.

Skills

RMF/NIST 800-53A

Penetration testing

Vulnerability analysis

DoD 8140 IAT III

CISSP/CEH

Mentoring

Job description

Quantum Sky is seeking an Information Security Analyst - SME with Red Team experience to support a DoD customer at Quantico. This senior cybersecurity expert will lead RMF assessments, advanced vulnerability analysis, security evaluation, and mission-impact risk assessment for assigned East Coast portfolios.

Responsibilities include conducting complex security control assessments, performing vulnerability analysis and authorized penetration testing, reviewing evidence, and developing feasible