{"id":2868625,"url":"https://alion.io/job/quantum-sky-dha-eoss-technical-writer-security-specialist-tech-writer","title":"DHA-EOSS Technical Writer (Security Specialist Tech Writer)","company":{"id":3854380,"name":"Quantum Sky","domain":"quantumsky.com","url":"https://alion.io/company/quantum-sky","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"iCIMS","truth_index":null},"role":"Product","role_family":"Product","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Aurora, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":115000,"max":130000,"currency":"USD","period":"year","gross":null,"usd_annual":130000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon Aurora","optional":false},{"name":"Amazon ECS","optional":false},{"name":"Apache HTTP Server","optional":false},{"name":"AWS","optional":false},{"name":"Burp Suite","optional":false},{"name":"FedRAMP","optional":false},{"name":"Fortify","optional":false},{"name":"Git","optional":false},{"name":"GitHub","optional":false},{"name":"HIPAA","optional":false},{"name":"Nessus","optional":false},{"name":"Oracle","optional":false},{"name":"PKI","optional":false},{"name":"Red Hat","optional":false},{"name":"Splunk","optional":false},{"name":"Windows","optional":false},{"name":"Windows Server","optional":false}],"status":"live","first_seen_at":"2026-10-19T18:41:26Z","employer_posted_date":"2026-10-19","last_verified_at":"2026-10-23T00:57:21Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"Description\nQuantum Sky is searching for an experienced Technical Writer (Security Specialist Tech Writer) to support the Defense Health Agency (DHA) E-Commerce Operational Systems Support (EOSS) contract in Aurora, Colorado.\nUnder this contract, our team provides full lifecycle IT sustainment, cybersecurity, and engineering modernization for the DHA E-Commerce System (ECS)-the mission-critical financial, contracting, and analytical engine supporting the Department of Defense's TRICARE Private Sector Healthcare operations. The DHA ECS ecosystem encompasses Oracle Federal Financials (OFF), the Enterprise Data Warehouse (EDW), Global Unison PRISM, and custom web applications hosted in MedCOI Amazon Web Services (AWS) GovCloud East and managed via Red Hat Enterprise Linux (RHEL) and Windows Server environments.\nAs a Senior Security Specialist Technical Writer, you will serve as the lead author and custodian of all cybersecurity, information assurance, and compliance documentation across the program. Working in close collaboration with the Information System Security Officer (ISSO), Information System Security Manager (ISSM), Enterprise Architects, System Administrators, and Database Administrators, you will author, maintain, and package authoritative artifacts required to sustain the DHA ECS Authority to Operate (ATO) under the DoD Risk Management Framework (RMF) and ensure full compliance with DISA STIGs, NIST SP 800-53 controls, and DHA security policies.\nResponsibilities:\n1. RMF Artifact & ATO Package Documentation\nAuthor, review, and continuously maintain the comprehensive body of Risk Management Framework (RMF) documentation required to achieve and preserve the DHA ECS triennial Authority to Operate (ATO) and Authority to Operate with Conditions (ATO-C).\n\nDirectly manage the documentation, configuration, and control evidence uploaded to the DHA ECS instance of the DoD Enterprise Mission Assurance Support Service (eMASS):\nSystem Security Plan (SSP): Draft and update detailed narrative descriptions of how DHA ECS satisfies all NIST SP 800-53 security controls across all 18 control families.\n\nSecurity Assessment Report (SAR) & Plan: Document technical testing results, security control assessments, and residual risk statements.\n\nRisk Assessment Report (RAR): Compile and maintain formal system-level risk assessments, categorizations, and mitigation recommendations\n\nSupport the ISSO and ISSM in conducting and documenting the annual RMF self-assessment (due on the anniversary of the ATO) to evaluate and validate security posture across all Dev, Test, QA, and Production environments.\n\n2. Contract Deliverables (CDRLs) Leadership (PWS Part 7, Attachment 1)\nLead the research, technical authoring, formatting, and submission of designated Contract Data Requirements Lists (CDRLs):\nSecurity Management and Assessment Plan Develop the formal strategy and documentation defining security control implementations, continuous monitoring processes, and security assessment methodologies.\n\nContinuity of Operations (COOP) Plan: In coordination with engineering and hosting teams, document disaster recovery, notification/activation, failover to alternate sites, and reconstitution procedures to achieve 99.90% system availability.\n\nSolution Design Documentation - Security Architecture Sections: Collaborate with architects to document security controls, boundary diagrams, and data flows within AWS GovCloud and AVHE.\n\nConfiguration Management (CM) Compliance Plan: Assist the CM team in documenting change authorization workflows, baseline control, and traceability.\n\n3. Vulnerability, POA&M, and STIG Documentation\nTrack, document, and maintain all active Plans of Action and Milestones (POA&Ms) and Acceptance of Risk (AOR) records in eMASS and internal trackers:\nEnsure all POA&M remediation milestones, resource requirements, and completion dates are accurately updated no later than ten (10) calendar days before expiration.\n\nTranslate technical vulnerability scan findings (from ACAS/Tenable Nessus, HBSS, Fortify, Burp Suite, Splunk) into actionable, clear POA&M narrative descriptions and mitigation plans.\n\nCoordinate with System Administrators, DBAs, and Developers to document and archive DISA Security Technical Implementation Guides (STIGs) and checklists (e.g., RHEL, Windows Server, Oracle Database, WebLogic, Apache, IIS).\n\nAssist in drafting technical justification packages for STIG exceptions, False Positives, and compensating controls.\n\n4. Enterprise Security Policies, SOPs, and Compliance Guidance\nAuthor, update, and standardize DHA ECS local Information Assurance Policies, Standard Operating Procedures (SOPs), and operational guides across the twenty (20) PWS-mandated RMF control areas:\nUser Access & Privileged Account SOPs\n\nAudit and Accountability Procedures\n\nIncident Response and Cyber Incident Handling SOPs (in compliance with CJCSM 6510.01B)\n\nMedia Protection, Physical & Environmental Protection Policies\n\nSystem and Communications Protection (SC) & Boundary Security SOPs\n\nIdentification and Authentication (IA) / PKI Enabling Procedures\n\nDocument Ports, Protocols, and Services Management (PPSM) requests and registration packets for AWS and AVHE connectivity in accordance with DoDI 8551.01.\n\nEnsure all documentation conforms to federal data privacy mandates, specifically DFARS 224.1, DoDD 5400.11 (DoD Privacy Program), and HIPAA Security/Privacy Rules (DoDM 6025.18 / DoDI 6025.18).\n\n5. Audit Support, Taskers, and Stakeholder Reporting\nPrepare structured responses, briefings, and evidence packages for security data calls, Cyber Operations Center (CYOC) directives, and Taskers issued by USCYBERCOM, DISA, and DHA Cybersecurity Officials.\n\nAssist in compiling documentation packages for DHA Contract Resource Management (CRM) financial audits, Office of General Counsel (OGC) inquiries, and external Defense Security Service / IG inspections.\n\nParticipate in weekly security synchronization meetings with the ISSO/ISSM and contribute documentation updates to the monthly Program Management Review (PMR).\n\nQualifications\nRequired:\nU.S. Citizenship: Must be a United States Citizen (mandatory for DHA network authorization, access to eMASS, handling of Controlled Unclassified Information [CUI], and facility clearance; dual citizenship cannot be accommodated).\n\n Cybersecurity Certification: Must possess or obtain a DoD 8140.03 certification (e.g., CompTIA Security+ CE, CCNA Security, CySA+) within three (3) months of hire.\nMandatory PWS Experience:\nMinimum of five (5) years of hands-on experience in Technical Writing and Cybersecurity / Information Assurance Documentation supporting enterprise IT programs, databases, and applications of the size and complexity of the DHA EOSS contract.\n\nDesired:\nHolding a current DoD 8140.03 baseline certification in the Information Assurance management or technical domain (e.g., CompTIA Security+ ce, CGRC / CAP, CySA+, SSCP, or CISSP).\n\nPrior experience supporting the Defense Health Agency (DHA), Military Health System (MHS), TRICARE, or DoD financial/acquisition systems (e.g., Oracle Federal Financials, PRISM).\n\nDirect experience writing and maintaining Disaster Recovery / Continuity of Operations Plans (COOP) and incident response plans.\n\nFamiliarity with AWS GovCloud security architecture, FedRAMP High authorizations, and Cloud Access Point (CAP) concepts.\n\nFamiliarity with Micro Focus Solutions Business Manager (SBM), HP Quality Center (QC) / ALM, or Git/GitHub for documentation change management.\n\nClearance:\nActive or favorably adjudicated Tier 3 (T3) / NACLC investigation (SF-86), or Tier 2 (T2) Public Trust / Non-Critical Sensitive IT-II investigation (SF-85P / MBI).\nMust be able to obtain and maintain an active Common Access Card (CAC) and DHA network account.\nLocation:\nAuroa, CO\nAbout Quantum Sky\nCompensation:\nCompensation is unique to each candidate and relative to the skills and experience they bring to the position. The salary range for this position is typically between $115,000-$130,000. This does not guarantee a specific salary as compensation is based upon multiple factors such as education, experience, certifications, and other requirements, and may fall outside of the above-stated range.\nBenefits:\nHighlights of our benefits include Health/Dental/Vision, 401(k) match, Paid Time Off, STD/LTD/Life Insurance, Referral Bonuses, professional development reimbursement, and parental leave.\nThe world the mission operates in is going post-quantum, contested, and machine-speed. Quantum Sky engineers the advantage across cyber, networks, software, and quantum because the mission demands dominance, not parity. We don't follow the map. We draw it.\nAt Quantum Sky, we believe that success starts with our people. We foster a collaborative, innovative, and mission-driven environment where every team member plays a critical role in shaping the future of technology. Are you ready to join #TeamQuantumSky?\nQuantum Sky Engineering LLC is an Equal Opportunity Employer; all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, [sexual orientation, gender identity,] national origin, disability, status as a protected veteran, or any characteristic protected by applicable law.","description_format":"text","description_chars":9292,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":true,"languages":[]},"benefits":["Life insurance","Parental leave","Professional development"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","Engineering Services"],"lifecycle":[{"event":"open","at":"2026-10-19T18:41:26Z"}],"visa":[],"liveness":{"score":82,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.868,"p_room":0.945,"age_days":2,"expected_fill_days":6,"reasons":["conf:0","velocity","win:mid"],"computed_at":"2026-10-22T06:10:10Z"},"pay":{"stated_usd_annual":130000,"is_top_pay":false},"html_url":"https://alion.io/job/quantum-sky-dha-eoss-technical-writer-security-specialist-tech-writer","json_url":"https://alion.io/job/quantum-sky-dha-eoss-technical-writer-security-specialist-tech-writer.json","meta":{"generated_at":"2026-10-23T02:39:45Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4385,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-24T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3854380},"rest":"https://alion.io/mcp/rest/get_company?id=3854380"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fquantum-sky-dha-eoss-technical-writer-security-specialist-tech-writer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fquantum-sky-dha-eoss-technical-writer-security-specialist-tech-writer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fquantum-sky-dha-eoss-technical-writer-security-specialist-tech-writer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/quantum-sky-dha-eoss-technical-writer-security-specialist-tech-writer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fquantum-sky-dha-eoss-technical-writer-security-specialist-tech-writer"}]}