DHA-EOSS Information Security Analyst (OS Security and Database Management Security Specialist)

Quantum Sky•Aurora, CO

1d•$165,000 - $180,000

About The Position

Quantum Sky is hiring a senior-level Information Security Analyst specializing in operating system security and database management security to support the Defense Health Agency (DHA) E-Commerce Operational Systems Support (EOSS) contract in Aurora, Colorado. The team provides IT sustainment, cybersecurity, and modernization for the DHA E-Commerce System (ECS), an enterprise platform supporting the Department of Defense’s TRICARE Private Sector Healthcare program. ECS includes Oracle Federal Financials, the Enterprise Data Warehouse, Global Unison PRISM, and specialized contract management systems hosted in MedCOI AWS GovCloud East and accessed through the DHA Application Virtualization Hosting Environment. The analyst serves as a security specialist alongside operating system administrators and database administrators, hardening Red Hat Enterprise Linux, Microsoft Windows Server, and Oracle database platforms. The role covers vulnerability scanning and remediation, DISA STIG enforcement, IAVA patch management, security auditing, and technical documentation supporting the DHA ECS triennial Authority to Operate under the DoD Risk Management Framework. The analyst also supports eMASS governance, identity and access security, configuration reviews, and continuity and disaster recovery exercises.

Requirements

U.S. citizenship; dual citizenship cannot be accepted.
Valid DoD 8140.03/8570.01-M IAT Level II certification upon hire, such as Security+ CE, CCNA-Security, CySA+, GICSP, GSEC, or SSCP.
Bachelor’s degree in Information Assurance, Cybersecurity, Computer Science, Computer Engineering, Information Systems, or a related discipline, or 15 years of documented IT cybersecurity, OS administration, or database security experience in lieu of the degree.
At least five years of hands-on Information Assurance/cybersecurity experience supporting enterprise applications, databases, and operating systems of comparable size and complexity.
At least five years of database information assurance experience, specifically with Oracle, including DoD STIGs, RMF CCIs, and IA checklists.
Experience applying and remediating DISA STIGs across Oracle Database 12c/19c, RHEL 7/8/9, and Microsoft Windows Server.
Hands-on proficiency with ACAS/Tenable Nessus vulnerability scanning, credentialed audits, and scan-result analysis.
Working knowledge of HBSS/Trellix Endpoint Security, including agent deployment, policy compliance, and log analysis.
Experience with DoD RMF, NIST SP 800-37, NIST SP 800-53 Rev. 4/5, and eMASS for POA&M and artifact tracking.
Knowledge of UNIX/Linux and Windows security parameters, kernel security configurations, SSH key management, PAM modules, and auditd logging.
Understanding of Oracle security features including TDE, Database Vault, VPD, Unified Auditing, and secure listener configurations.
Familiarity with AWS GovCloud hosting architectures, security groups, IAM policies, and VPC routing in a DoD MedCOI environment.
Active or favorably adjudicated Tier 3/NACLC investigation (SF-86) granting Secret clearance eligibility.
Ability to obtain and maintain an active CAC and DHA IT-II privileged access designation before network onboarding.

Nice To Haves

Advanced cybersecurity certification under DoD 8140 guidelines, such as CISSP, CISA, CISM, CASP+ CE, or CSSP Auditor/Infrastructure.
Prior experience supporting the DHA, Military Health System, DISA DECC, or TRICARE systems.
Experience with Splunk enterprise log management, dashboard creation, and query development for security event correlation.
Experience supporting DoD ICAM, CAC/PKI integration, and SAML/OAuth token exchanges across Oracle Fusion Middleware, including WebLogic, OAM, and OID.
Scripting experience with Bash, PowerShell, Python, or SQL to automate STIG checklist evaluations and compliance audits.
Experience preparing for or participating in government Cyber Security Inspections, including CCRI, DHA RMF Site Visits, or Financial Audit SOC-1 reviews.

Responsibilities

Apply, validate, and audit DISA Database STIGs and DoD RMF Control Correlation Identifiers for Oracle Database 12c/19c, Oracle Internet Directory, Oracle Access Manager, and Cloud Control.
Audit database access permissions, roles, privileges, and profile parameters to enforce least privilege and the DHA ECS Segregation of Duties matrix.
Monitor database audit logs, Unified Auditing trails, and connection events; coordinate with the ISSO on forwarding logs to Splunk.
Support DBAs during bi-weekly maintenance windows and software upgrades, verifying database security configurations after patching.
Direct and enforce OS security hardening across RHEL 7/8/9 and Windows Server 2016/2019/2022 virtual servers in MedCOI AWS GovCloud East.
Apply, automate, and document DISA OS STIGs, SRGs, and GPOs across AWS AMIs and active server instances.
Work with Systems Administrators to build and maintain hardened, application-compliant DHA ECS AMIs and templates for DCOPS hosting deployment.
Oversee HBSS/ESS agent operations, including policy enforcement, antivirus definitions, and HIPS compliance across virtual endpoints.
Conduct and analyze vulnerability scans across operating systems and databases using ACAS/Tenable Nessus, HBSS, Splunk, and Burp Suite.
Evaluate IAVAs, IAVBs, and CYOC directives; coordinate patches, scripted fixes, and configuration remediation within DoD timelines.
Support quarterly user and permission audits across development, test, QA, and production environments.
Perform root-cause analyses of ACAS or DCOPS findings to determine whether they are vulnerabilities, false positives, or mitigated by compensating network controls.
Assist the ISSO and ISSM in sustaining the DHA ECS ATO and maintaining security artifacts in accordance with DoDI 8510.01 and NIST SP 800-53.
Maintain POA&Ms and Acceptance of Risk packages in eMASS, ensuring open OS and database POA&Ms are reviewed and updated no later than ten calendar days before expiration.
Draft remediation milestone narratives and compile evidentiary test artifacts for POA&M closure.
Participate in the annual RMF self-assessment and technical security audits conducted on the ATO anniversary.
Support the Technical Writer and ISSO in drafting, reviewing, and updating the Security Management and Assessment Plan and SSP control responses.
Participate in Configuration Working Group and Configuration Management Board reviews, validating security before software, OS, or schema changes are deployed.
Support DoD ICAM integration and configuration across OFF, WebLogic, OID, and OAM for compliant authentication and authorization of person and non-person entities.
Enforce DoD PKI and CAC/PIV authentication standards across web interfaces, database listener endpoints, and management ports.
Participate in the annual DHA ECS COOP and disaster recovery exercise, verifying that OS and database security postures and STIG configurations remain consistent after failover.