DHA EOSS - Information Security Analyst; Monitoring Information Assurance​/Security Specialist

Quantum Sky is searching for an experienced Senior Information Security Analyst (Monitoring Information Assurance/Security Specialist) to join our enterprise cybersecurity team supporting the Defense Health Agency (DHA) E-Commerce Operational Systems Support (EOSS) contract.

In this mission-critical role, you will serve as the primary operational guardian of the DHA E-Commerce System (ECS)—an enterprise portfolio encompassing Oracle Federal Financials (OFF), the Enterprise Data Warehouse (EDW), contract management systems (PRISM, MTR/PAT), and external data exchange nodes hosted in a Medical Community of Interest (MedCOI) AWS Gov Cloud environment.

You will lead the day-to-day execution of the program’s Information Security Continuous Monitoring (ISCM) strategy in accordance with NIST SP 800-137 and DoD Risk Management Framework (RMF) standards. Your responsibilities include operating and administering the program's dedicated security monitoring infrastructure (Splunk log aggregation, ACAS credentialed vulnerability scanning, HBSS/ESS endpoint monitoring, and Burp Suite application assessments), actively tracking risk metrics in the Continuous Monitoring and Risk Scoring (CMRS) system, responding to operational security directives through the CYOC Issuance Tracker (CIT), leading cyber incident handling procedures per CJCSM 6510.01B, and substantiating vulnerability closures in eMASS to maintain the system's Authority to Operate (ATO).

Responsibilities:

• Maintain and execute the DHA ECS Continuous Monitoring Plan in compliance with NIST SP 800-137, DoDI 8510.01, and DHA cybersecurity directives.

• Continuously monitor the operational security posture of all DHA ECS web applications, relational databases (Oracle), and cloud computing infrastructure hosted within MedCOI AWS Gov Cloud East to identify unauthorized activity, anomalies, or system degradation.

• Routinely monitor, analyze, and maintain the system's security risk posture within the DHA Data Center Operations (DCOPS) Continuous Monitoring and Risk Scoring (CMRS) system, investigating risk score variances and coordinating remediation actions.

• Actively track, manage, and respond to cyber directives, operational orders, and taskers logged in the CYOC Issuance Tracker (CIT), ensuring timely status reporting and technical mitigation.

• Administer, configure, and maintain the operational DHA ECS security monitoring toolset, including Splunk Universal Forwarders, Assured Compliance Assessment Solution (ACAS / Tenable Nessus) scanners/agents, Host Based Security System (HBSS / Trellix ESS) clients, and Burp Suite Professional.

• Configure and verify Splunk log forwarders on Red Hat Enterprise Linux (RHEL) and Windows Server instances to aggregate and normalize operating system, web server (Apache, IIS, Web Logic), and database audit logs into DCOPS-hosted Splunk enterprise repositorie.

• Author tailored Splunk search queries, correlation rules, dashboards, and automated alerting thresholds to detect abnormal privilege escalation, failed authentications, brute-force activity, or unauthorized configuration modifications.

• Plan, schedule, and execute regular credentialed vulnerability scans using ACAS / Tenable Nessus across all virtual machines and database listeners; analyze vulnerability reports, eliminate false positives, and deliver prioritized remediation plans to engineering team.

• Oversee HBSS/ESS agent operational health, verifying that Host Intrusion Prevention System (HIPS), Data Loss Prevention (DLP), and Virus Scan Enterprise modules remain active, properly policy-assigned, and communicating with the ePO…