The Information Security Analyst will serve as a Senior-Level security professional supporting the Defense Health Agency (DHA) E-Commerce Operational Systems Support (EOSS) contract, embedded with OS and DBA teams to harden operating systems and Oracle databases for DHA ECS systems. This onsite role in Aurora, CO focuses on vulnerability scanning, DISA STIG enforcement, and maintaining RMF/eMASS security artifacts for DHA ECS ATO.
Location
Aurora, CO (onsite)
Compensation
USD 130,000 - 180,000 per year
Role Summary
Embedded with OS and database administration teams, the analyst will harden RHEL and Windows Server systems, apply database security controls across DHA ECS Oracle environments, and support continuous security monitoring. The position also includes maintaining RMF/eMASS documentation and supporting DHA ECS Authority to Operate (ATO) sustainment activities.
Key Responsibilities
- Serve as the dedicated Database Security Specialist embedded with the DBA team, ensuring security policies, access controls, and patch routines are consistently applied across all DHA ECS Oracle database instances (OFF, EDW, PRISM, MTR/PAT, ECCP) across Development, System Test, QA/Pre-Prod, Benchmark, and Production.
- Apply, validate, and audit DISA Database STIGs and DoD RMF Control Correlation Identifiers (CCIs) for Oracle Database 12c/19c, Oracle Internet Directory (OID), Oracle Access Manager (OAM), and Cloud Control.
- Audit database access permissions, roles, privileges, and profile parameters to prevent privilege escalation and enforce least privilege aligned to the DHA ECS Segregation of Duties (SOD) matrix.
- Monitor and evaluate database audit logs, Unified Auditing trails, and database connection events; coordinate with the ISSO to ensure audit logs are forwarded to Splunk for continuous monitoring and correlation.
- Support DBAs during bi-weekly maintenance windows and software upgrades to confirm database security configurations remain intact after patching.
- Lead OS-level security hardening for DHA ECS virtual servers running RHEL 7/8/9 and Windows Server 2016/2019/2022 within MedCOI AWS GovCloud East.
- Apply, automate, and document DISA Operating System STIGs, SRGs, and GPOs across AWS AMIs and active server instances.
- Collaborate with Systems Administrators to engineer and maintain hardened, application-compliant DHA ECS AMIs and templates for DCOPS-hosting deployment.
- Oversee HBSS / Endpoint Security Standard (ESS) agent operations, ensuring proper policy enforcement, antivirus definitions, and HIPS module compliance across virtual endpoints.
- Conduct vulnerability scans across OS environments and databases using government-provided tools including ACAS / Tenable Nessus, HBSS, Splunk, and Burp Suite.
- Evaluate IAVAs, IAVBs, and Cyber Operations Center directives (CIT) and coordinate with Systems Administrators and DBAs to implement patches, script fixes, or configuration remediations within DoD timelines.
- Support quarterly user and permission audits across Dev, Test, QA, and Production to verify compliance with DHA access control and account lifecycle policies.
- Perform technical root-cause analyses on security findings from ACAS or DCOPS host management to determine whether items are true vulnerabilities, false positives, or mitigated through compensating network controls.
- Assist the ISSO and ISSM with sustaining DHA ECS ATO and maintaining security artifacts aligned to DoDI 8510.01 and NIST SP 800-53.
- Maintain POA&Ms and AOR packages in eMASS, ensuring open OS and database POA&Ms are reviewed, validated, and updated no later than ten (10) calendar days prior to expiration, and prepare evidentiary test artifacts for POA&M closure.
- Participate in annual RMF self-assessment and technical security audits required on the anniversary of the ATO.
- Support drafting, reviewing, and updating the Security Management and Assessment Plan and System Security Plan (SSP) control responses.
- Serve as a cybersecurity stakeholder in Configuration Working Group (CWG) and Configuration Management Board (CMB) reviews to ensure deployments are security-validated prior to software, OS, or schema changes.
- Support integration and configuration of DoD ICAM into OFF, WebLogic, OID, and OAM to enable compliant authentication and authorization for Person Entities (PE) and Non-Person Entities (NPE).
- Ensure strict adherence to DoD PKI and CAC/PIV authentication standards across web interfaces, database listener endpoints, and management ports.
- Participate in the annual DHA ECS COOP and Disaster Recovery exercise to verify that OS and database security postures and STIG configurations remain identical upon failover.
Minimum Qualifications
- 5+ years of hands-on Information Assurance/Cybersecurity experience supporting enterprise applications, databases, and operating systems of comparable scope to the DHA EOSS contract.
- Security DBA experience (Oracle) with at least 5 years applying DoD STIGs, RMF CCIs, and IA checklists for database IA.
- Education: Bachelor’s degree from an accredited university in Information Assurance, Cybersecurity, Computer Science, Computer Engineering, Information Systems, or a related discipline. (Fifteen (15) years of documented experience in IT cybersecurity, OS administration, or database security may be substituted in lieu of a bachelor’s degree.)
Certifications
- Valid IAT Level II certification upon hire (e.g., CompTIA Security+ ce, CCNA-Security, CySA+, GICSP, GSEC, or SSCP).
Security Clearance / Eligibility
- United States citizenship required (dual citizenship cannot be accepted) for DoD Secret clearance, DHA network account, privileged IT-II access, and eMASS authorization.
- Active or favorably adjudicated Tier 3 (T3) / NACLC investigation (SF-86) granting Secret clearance eligibility.
- Ability to obtain and maintain an active Common Access Card (CAC) and DHA IT-II privileged access designation prior to network onboarding.
Required Technical Proficiencies
- Proven track record applying and remediating DISA STIGs across Oracle Databases (12c/19c), RHEL 7/8/9, and Microsoft Windows Server.
- Hands-on proficiency with ACAS / Tenable Nessus for vulnerability scanning, credentialed audits, and scan result parsing.
- Working knowledge of HBSS / Trellix Endpoint Security (ENS), including agent deployment, policy compliance, and log analysis.
- Demonstrated experience with DoD RMF (NIST SP 800-37, NIST SP 800-53 Rev 4/5) and hands-on utilization of eMASS for POA&M and artifact tracking.
- Solid understanding of UNIX/Linux and Windows system security parameters, kernel security configurations, SSH key management, PAM modules, and auditd logging.
- Strong understanding of Oracle database security features including TDE, Database Vault, VPD, Unified Auditing, and secure listener configurations.
- Familiarity with AWS GovCloud hosting architectures including security groups, IAM policies, and VPC routing within a DoD MedCOI environment.
Technologies
Red Hat Enterprise Linux (RHEL) 7/8/9, Microsoft Windows Server (2016/2019/2022), Oracle Database 12c/19c, Oracle Internet Directory (OID), Oracle Access Manager (OAM), Cloud Control, DISA STIGs (Database STIGs, Operating System STIGs), SRGs, GPOs, HBSS, ESS, HIPS, ACAS, Tenable Nessus, Splunk, Burp Suite, eMASS, DoD Enterprise Mission Assurance Support Service, NIST SP 800-53, DoDI 8510.01, NIST SP 800-37, DoD RMF, DoD Enterprise Identity, Credential, and Access Management (ICAM), WebLogic, DoD PKI, CAC, PIV, Oracle TDE, Database Vault, VPD, Unified Auditing, SSH, PAM modules, auditd, AWS GovCloud East, MedCOI AWS GovCloud East, AMIs, AWS, IAM policies, and VPC routing.
Benefits
- Health/Dental/Vision
- 401(k) match
- Paid Time Off
- STD/LTD/Life Insurance
- Referral Bonuses
- Professional development reimbursement
- Parental leave
