Information Security Analyst; OS Security & Database Management Security Specialist

The Information Security Analyst will serve as a Senior-Level security professional supporting the Defense Health Agency (DHA) E-Commerce Operational Systems Support (EOSS) contract, embedded with OS and DBA teams to harden operating systems and Oracle databases for DHA ECS systems. This onsite role in Aurora, CO focuses on vulnerability scanning, DISA STIG enforcement, and maintaining RMF/eMASS security artifacts for DHA ECS ATO.

Aurora, CO (onsite)

USD 130, per year

Embedded with OS and database administration teams, the analyst will harden RHEL and Windows Server systems, apply database security controls across DHA ECS Oracle environments, and support continuous security monitoring. The position also includes maintaining RMF/eMASS documentation and supporting DHA ECS Authority to Operate (ATO) sustainment activities.

• Serve as the dedicated Database Security Specialist embedded with the DBA team, ensuring security policies, access controls, and patch routines are consistently applied across all DHA ECS Oracle database instances (OFF, EDW, PRISM, MTR/PAT, ECCP) across Development, System Test, QA/Pre-Prod, Benchmark, and Production.
• Apply, validate, and audit DISA Database STIGs and DoD RMF Control Correlation Identifiers (CCIs) for Oracle Database 12c/19c, Oracle Internet Directory (OID), Oracle Access Manager (OAM), and Cloud Control.
• Audit database access permissions, roles, privileges, and profile parameters to prevent privilege escalation and enforce least privilege aligned to the DHA ECS Segregation of Duties (SOD) matrix.
• Monitor and evaluate database audit logs, Unified Auditing trails, and database connection events; coordinate with the ISSO to ensure audit logs are forwarded to Splunk for continuous monitoring and correlation.
• Support DBAs during bi-weekly maintenance windows and software upgrades to confirm database security configurations remain intact after patching.
• Lead OS-level security hardening for DHA ECS virtual servers running RHEL 7/8/9 and Windows Server 2016/2019/2022 within MedCOI AWS Gov Cloud East
  .
• Apply, automate, and document DISA Operating System STIGs, SRGs, and GPOs across AWS AMIs and active server instances.
• Collaborate with Systems Administrators to engineer and maintain hardened, application-compliant DHA ECS AMIs and templates for DCOPS-hosting deployment.
• Oversee HBSS / Endpoint Security Standard (ESS) agent operations, ensuring proper policy enforcement, antivirus definitions, and HIPS module compliance across virtual endpoints.
• Conduct vulnerability scans across OS environments and databases using government-provided tools including ACAS / Tenable Nessus
  , HBSS, Splunk, and Burp Suite
  .
• Evaluate IAVAs
  , IAVBs
  , and Cyber Operations Center directives (CIT) and coordinate with Systems Administrators and DBAs to implement patches, script fixes, or configuration remediations within DoD timelines.
• Support quarterly user and permission audits across Dev, Test, QA, and Production to verify compliance with DHA access control and account lifecycle policies.
• Perform technical root-cause analyses on security findings from ACAS or DCOPS host management to determine whether items are true vulnerabilities, false positives, or mitigated through compensating network controls.
• Assist the ISSO and ISSM with sustaining DHA ECS ATO and maintaining security artifacts aligned to DoDI 8510.01 and NIST SP 800-53
  .
• Maintain POA&Ms and AOR packages in eMASS
  , ensuring open OS and database POA&Ms are reviewed, validated, and updated no later than ten (10) calendar days prior to expiration, and prepare evidentiary test artifacts for POA&M closure.
• Participate in annual RMF self-assessment and technical security audits required on the…