Senior InfoSec Analyst - RMF, Threat Detection & Cloud

Cybersecurity Jobs; Aurora (CO); On-site; USD 160,000 - 185,000; Full time

Benefits offered by this job

Health/Dental/Vision

401(k) match

Paid Time Off

STD/LTD/Life Insurance

Referral Bonuses

Professional development reimbursement

Parental leave

Job summary

Quantum Sky seeks a Senior Information Security Analyst to serve as the operational security guardian for the DHA E-Commerce System (ECS) in Aurora, CO. This onsite role emphasizes continuous monitoring, security analytics, incident handling, and RMF/ATO support to maintain security posture.

You will administer the DHA ECS toolset (Splunk, ACAS, Nessus, HBSS, ePO, Burp), coordinate with ISSM/ISSO, and lead incident response activities per DoD directives.

Qualifications

• U.S. citizenship required with DHA access and security clearance eligibility.
• IAT Level II certification required on hire (e.g., Security+, CySA+, GSEC, CCNA-Security, SSCP).
• Bachelor’s degree in Information Assurance/Cybersecurity or 15 years of substitute experience.
• 5+ years hands-on security experience with enterprise apps, databases, and infrastructure.
• 3+ years in security monitoring, log correlation, vulnerability scanning, and incident response.

Responsibilities

• Maintain and execute the DHA ECS Continuous Monitoring Plan per NIST SP 800-137 and RMF directives.
• Continuously monitor DHA ECS web apps, Oracle databases, and MedCOI AWS GovCloud East.
• Monitor CMRS risk posture and coordinate remediation actions.
• Track and respond to directives in the CIT and provide mitigation updates.
• Administer DHA ECS monitoring toolset (Splunk, ACAS/Nessus, HBSS, ePO, Burp).
• Configure Splunk forwarders on RHEL and Windows Server and centralize logs.
• Develop Splunk queries, dashboards, and alerting thresholds for security events.
• Plan and execute credentialed vulnerability scans with ACAS/Nessus; deliver remediation plans.
• Oversee HBSS/ESS health and ePO communications.
• Lead security incident response per CJCSM 6510.01B and DoD 8510.1-M; conduct post-incident analysis.
• Perform technical event analysis across networks, hosts, and apps for CUI/PII/PHI impact.
• Coordinate incident reporting with ISSM/ISSO and DHA GSC/DCOPS.
• Write After-Action Reports with preventive controls for CDLR 0012.
• Monitor IAVAs/IAVBs/TD Advisories from USCYBERCOM/DISA; assess applicability to DHA ECS stacks.
• Verify patches and STIG configurations within compliance windows.
• Maintain DHA program PoA&M status in eMASS and ensure timely reviews.
• Prepare mitigation artifacts for AOR requests.
• Conduct quarterly privilege audits across environments to enforce SOD.
• Maintain whitelisted external connection registry.
• Support triennial ATO renewals and RMF self-assessments with metrics and logs.
• Prepare responses for cyber data calls and audits.

Skills

Security Monitoring

Log Correlation

Incident Response

Vulnerability Scanning

Risk Assessment

Education

Bachelor’s degree in Information Assurance / Cybersecurity / CS

15 years IT security experience (substitute for degree)

Tools

Splunk

ACAS

Tenable Nessus

HBSS

Trellix ESS

ePO

Burp Suite

RHEL

Windows Server

Apache

IIS

WebLogic

Job description

Quantum Sky seeks a Senior Information Security Analyst to serve as the operational security guardian for the DHA E-Commerce System (ECS) in Aurora, CO. This onsite role emphasizes continuous monitoring, security analytics, incident handling, and RMF/ATO support to maintain security posture.

You will administer the DHA ECS toolset (Splunk, ACAS, Nessus, HBSS, ePO, Burp), coordinate with ISSM/ISSO, and lead incident response activities per DoD directives.