JobsCyber SecurityDenverInformation Security Analyst
Quantum Sky
Posted 3 days ago · Jobs at Quantum Sky
Information Security Analyst
Quantum Sky · Aurora, Colorado, United States
SAVE THIS JOB
In short
Monitor and analyze SIEM, endpoint, audit-log, and vulnerability-scan data to identify security events, configuration drift, and compliance issues, then support incident response and remediation. Maintain cybersecurity compliance by tracking directives and POA&Ms, verifying DISA STIGs, supporting RMF documentation and continuous monitoring, and communicating risks and findings to the ISSO, technical teams, and leadership.
What they're looking for
MUST-HAVE SKILLS
ALSO MENTIONED
Requires at least three years of direct experience in information assurance, cybersecurity monitoring, or vulnerability management; hands-on vulnerability scanning, STIG compliance, and security monitoring experience; and working knowledge of NIST SP 800-53, RMF, and DoW security policy. Applicants must be U.S. citizens, hold a qualifying DoD 8140 certification for DCWF 541 at hire, meet the stated Secret-clearance eligibility requirements, and be able to obtain a CAC and DHA IT-II privileged access designation.
About the employer
Quantum Sky
At Quantum Sky, we harness AI and quantum to deliver secure advantage for the nations toughest missions.
Quantum Sky is a mission technology company that builds secure AI, cyber, cloud, and quantum capabilities for defense, intelligence, and federal civilian agencies.
Read moreShow less
Our customers operate in environments where technology moves faster than ever, the data is more complex, and the threat surface keeps expanding. Quantum Sky helps them stay ahead. We combine trusted government delivery with applied AI, cyber, cloud, and software expertise, and deepening quantum research, to modernize critical systems, protect mission data, and operate with greater speed, resilience, and decision advantage. At the core of our model is Project 137, our applied innovation and IP engine that turns emerging technology into fielded mission advantage, capability agencies can field, trust, and sustain, not just pilot. Headquartered in Reston, Virginia, Quantum Sky engineers practical advantage for the nation's most critical missions. Follow us for the latest on our capabilities, insights, and mission impact. Learn more at quantumsky.com.
- INDUSTRY
- IT Services and IT Consulting
- COMPANY
- Privately Held
- FOUNDED
- 2018
- HEADQUARTERS
- Reston, Virginia
- SIZE
- 1,001-5,000
- OFFICES
- 12 on LinkedIn
- OPEN HERE
- 3 roles
KNOWN FOR
Is your LinkedIn profile ready for roles like this?
A free review of your profile, scored against what Security roles ask for, and what to fix first.
Questions about this role
- Is this Quantum Sky role remote?
- Tagged on site.
- What does it pay?
- The posting lists $104,000–$145,000 a year.
- Does it sponsor visas?
- Listed as no visa sponsorship.
- What experience does it ask for?
- Listed as 2-5 years.
The posting, in full
Quantum Sky is seeking a highly skilled Information Security Analyst to support the Defense Health Agency (DHA) Enterprise Operations & Support Services (EOSS) contract. Operating within a secure, cloud-hosted enclaved environment (DoD Impact Level 4), you will monitor, analyze, and respond to security events, manage vulnerabilities, and keep systems compliant with DoW cybersecurity requirements under the Risk Management Framework (RMF). To include, interpreting the outputs of enterprise cybersecurity tools—specifically Splunk, Endpoint Security Suites, and the Assured Compliance Assessment Solution (ACAS). You will analyze server logs, perform system-level audits, track configuration drifts against DISA STIG baselines, and report continuous compliance data directly to the Information System Security Officer (ISSO).
▶ READ THE FULL POSTING▼ CLOSE THE FULL POSTING
Description
Quantum Sky is seeking a highly skilled Information Security Analyst to support the Defense Health Agency (DHA) Enterprise Operations & Support Services (EOSS) contract. Operating within a secure, cloud-hosted enclaved environment (DoD Impact Level 4), you will monitor, analyze, and respond to security events, manage vulnerabilities, and keep systems compliant with DoW cybersecurity requirements under the Risk Management Framework (RMF). To include, interpreting the outputs of enterprise cybersecurity tools—specifically Splunk, Endpoint Security Suites, and the Assured Compliance Assessment Solution (ACAS). You will analyze server logs, perform system-level audits, track configuration drifts against DISA STIG baselines, and report continuous compliance data directly to the Information System Security Officer (ISSO).
Responsibilities
- Monitor SIEM (e.g. Splunk) and endpoint tools (e.g., CrowdStrike/Trellix/HBSS successors) to detect, triage and escalate security events.
- Analyze vulnerability scans with ACAS/Tenable; track findings and remediation through POA&Ms.
- Verify DISA STIGs and SRGs using SCAP and STIG Viewer. Assess compliance, document deviations, and assist in remediation efforts.
- Review audit logs and system configurations for anomalies, unauthorized changes and policy violations.
- Support incident response: collect evidence, document timelines and write incident reports.
- Track and implement IAVMs, CTOs, TASKORDs and other directives within required timelines.
- Assist the ISSO with RMF artifacts, continuous monitoring and annual reviews in eMASS.
- Brief findings and risk to technical staff and leadership in clear, actionable terms.
Qualifications
Required
- DoD 8140 Cyber Workforce Certification (e.g., CompTIA Security+ CE, CompTIA Cloud+, GSEC, CCSP, or SSCP) for the assigned work role (DCWF 541 – Vulnerability Assessment Analyst) at time of hire.
- Public Trust or higher, U.S. citizenship required.
- Hands-on experience with vulnerability scanning, STIG compliance and security monitoring tools.
- Working knowledge of NIST SP 800-53, RMF (NIST SP 800-37 / DoDI 8510.01) and DoW security policy.
- A minimum of 3-years of direct experience in Information Assurance, cybersecurity monitoring, and/or vulnerability management.
Desired
- Experience with eMASS, ACAS/Tenable, and Splunk.
- Familiarity with Windows Servers, Red Hat Enterprise Linux, Oracle Databases, and/or network security devices.
- Direct experience implementing and auditing DISA STIGs and managing RMF accreditation packages (IATO/ATO)
Clearance
- Active or favorably adjudicated Tier 3 (T3) / NACLC investigation (SF-86) granting Secret clearance eligibility.
- Must be able to obtain and maintain an active Common Access Card (CAC) and DHA IT-II privileged access designation prior to network onboarding.
Location
- Aurora, CO
About Quantum Sky
Compensation
- Compensation is unique to each candidate and relative to the skills and experience they bring to the position. The salary range for this position is typically between $104,000-$145,000. This does not guarantee a specific salary as compensation is based upon multiple factors such as education, experience, certifications, and other requirements, and may fall outside of the above-stated range.
Benefits
- Highlights of our benefits include Health/Dental/Vision, 401(k) match, Paid Time Off, STD/LTD/Life Insurance, Referral Bonuses, professional development reimbursement, and parental leave.
The world the mission operates in is going post-quantum, contested, and machine-speed. Quantum Sky engineers the advantage across cyber, networks, software, and quantum because the mission demands dominance, not parity. We don't follow the map. We draw it.
At Quantum Sky, we believe that success starts with our people. We foster a collaborative, innovative, and mission-driven environment where every team member plays a critical role in shaping the future of technology. Are you ready to join #TeamQuantumSky?
Quantum Sky Engineering LLC is an Equal Opportunity Employer; all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, [sexual orientation, gender identity,] national origin, disability, status as a protected veteran, or any characteristic protected by applicable law.