DHA-EOSS Information Security Analyst; OS Security and Database Management Security Specialist

Quantum Sky is searching for a Senior-Level Information Security Analyst 273 (OS Security & Database Management Security Specialist) to join our mission-critical engineering team supporting the Defense Health Agency (DHA) E-Commerce Operational Systems Support (EOSS) contract in Aurora, Colorado.

Under this contract, our team provides comprehensive IT sustainment, cybersecurity, and modernization for the DHA E-Commerce System (ECS)—the enterprise platform managing the Department of Defense’s TRICARE Private Sector Healthcare program. DHA ECS encompasses Oracle Federal Financials (OFF), the Enterprise Data Warehouse (EDW), Global Unison PRISM, and specialized contract management systems hosted in MedCOI Amazon Web Services (AWS) Gov Cloud East and accessed via the DHA Application Virtualization Hosting Environment (AVHE).

In this critical cybersecurity role, you will bridge the gap between technical operations and cyber governance. You will serve as the dedicated security specialist embedded alongside our Operating System Administrators and Database Administrators (DBAs), ensuring that all Red Hat Enterprise Linux (RHEL), Microsoft Windows Server, and Oracle database platforms are rigorously hardened against emerging threats. You will execute automated and manual vulnerability scans, enforce DISA Security Technical Implementation Guides (STIGs), coordinate IAVA patch management, remediate security findings, and author technical justification artifacts supporting the DHA ECS triennial Authority to Operate (ATO) under the DoD Risk Management Framework (RMF).

Responsibilities:

• Serve as the dedicated Database Security Specialist embedded with the DBA team, ensuring that security policies, access controls, and patch routines are uniformly applied across all DHA ECS Oracle database instances (OFF, EDW, PRISM, MTR/PAT, ECCP) across all operating environments (Development, System Test, QA/Pre-Prod, Benchmark, and Production).

• Apply, validate, and audit DISA Database STIGs and DoD RMF Control Correlation Identifiers (CCIs) for Oracle Database 12c/19c, Oracle Internet Directory (OID), Oracle Access Manager (OAM), and Cloud Control.

• Audit database access permissions, roles, privileges, and profile parameters to prevent privilege escalation and enforce least privilege in accordance with the DHA ECS Segregation of Duties (SOD) matrix.

• Monitor and evaluate database audit logs, Unified Auditing trails, and database connection events; coordinate with the ISSO to ensure audit logs are continuously forwarded to Splunk for continuous monitoring and correlation.

• Support DBAs during bi-weekly maintenance windows and software upgrades to verify that database security configurations remain intact post-patching.

• Direct and enforce OS-level security hardening across all DHA ECS virtual servers executing Red Hat Enterprise Linux (RHEL 7/8/9) and Microsoft Windows Server (2016/2019/2022) within MedCOI AWS Gov Cloud East.

• Apply, automate, and document DISA Operating System STIGs, Security Requirements Guides (SRGs), and Group Policy Objects (GPOs) across AWS AMIs and active server instances.

• Collaborate with Systems Administrators to engineer and maintain hardened, application-compliant DHA ECS Amazon Machine Images (AMIs) and templates for DCOPS hosting deployment.

• Oversee Host Based Security System (HBSS) / Endpoint Security Standard (ESS) agent operations, ensuring proper policy enforcement, antivirus definitions, and Host Intrusion Prevention System (HIPS) module compliance across all virtual endpoints.

• Conduct and analyze regular vulnerability scans across all OS environments and…