Information Security Analyst - SME

Quantum Sky•Quantico Base, VA

27d•$155,000 - $165,000•Onsite

About The Position

Quantum Sky is searching for an Information Security Analyst - SME with Red Team experience to support a DoW customer at Quantico. This candidate will serve as a senior cybersecurity subject matter expert for complex RMF Step 6 assessments, advanced vulnerability analysis, security evaluation, and mission-impact risk assessment for assigned East Coast and tactical portfolios.

Requirements

US. citizenship.
DoD 8140 /cyberspace workforce qualification: IAT Level III or applicable CSSP/DCWF role.
Certification: CISSP, CEH, or other Government-accepted certification meeting the required 8140 work role.
3+ years conducting DoW network assessments.
5+ years performing secure code reviews.
2+ years performing penetration testing.
3+ years performing security evaluations.
1+ year experience supporting DoW expeditionary network environments of similar size and complexity to the Marine Corps Cyberspace Environment (MCCE).
Ability to meet current DoW, DoN, and USMC privileged-access, background investigation, training, and least-privilege requirements.
Secret clearance required with the ability to upgrade to a Top Secret

Nice To Haves

Deep RMF/NIST 800-53A experience; advanced penetration testing/vulnerability analysis; Marine Corps tactical/expeditionary experience; strong AO-level communication.

Responsibilities

Lead complex security control assessments and provide expert interpretation of RMF, NIST, DoW, DoN, and USMC cybersecurity requirements.
Perform advanced vulnerability analysis, security evaluation, secure code review, and authorized penetration testing; assess attack paths, exploitability, exposure, and mission consequences.
Review assessment evidence and findings for technical sufficiency, reproducibility, and control mapping before release.
Develop technically feasible mitigation strategies, POA&M recommendations, compensating-control options, and remediation validation approaches.
Lead or support assessment planning, rules-of-engagement development, technical adjudication, exit briefs, and final report development.
Support quarterly AO control-effectiveness reporting and translate technical conditions into decision-quality risk statements and recommendations.
Provide technical leadership, mentoring, and reach-back support to Senior and Journeyman analysts across assigned portfolios.
Contribute to ConMon SOP updates, lessons learned, evidence standards, and continuous-improvement activities.