Information Assurance / Security Engineer - MID-Level

Arcfield•Middletown, RI

About The Position

The Information Assurance / Security Engineer monitors and analyzes security alerts, logs, and incidents using ACASS; conducts vulnerability assessments with SCAP Compliance Checker; and performs vulnerability remediation and system hardening on Red Hat Enterprise Linux systems. The role supports patching and security updates using Red Hat repositories, RPM packages, and automation tools such as Ansible, Python, or Bash. The engineer executes STIG assessments, validates controls against DISA STIGs, NIST SP 800-53, and organizational requirements, and supports continuous monitoring and system compliance. The position also involves troubleshooting system and software issues, developing and executing tests to validate functionality and security, and designing, developing, evaluating, and testing system and software integration. The engineer documents findings, mitigations, remediation, and compliance results, and works with system administrators, engineers, ISSMs, and ISSOs to resolve cybersecurity findings.

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, or a relevant field.
Active SECRET security clearance.
Certifications listed: Security+, CISSP, CEH, RHCE.
Experience varies by degree: BS, 5–7 years; MS, 3–5 years; PhD, 0–2 years.

Nice To Haves

Advanced degree preferred.

Responsibilities

Monitor and analyze security alerts, logs, and incidents using ACASS, and respond to security incidents.
Conduct vulnerability assessments using SCAP Compliance Checker, analyze scan results, and identify compliance gaps.
Perform vulnerability remediation and system hardening on Red Hat Enterprise Linux (RHEL) systems.
Deploy patches, updates, and security fixes using Red Hat repositories, RPM packages, and automation tools such as Ansible or Python and Bash scripting.
Execute STIG assessments, analyze findings, and document compliance status using STIG Viewer.
Validate security controls against DISA STIGs, NIST SP 800-53, and organizational security requirements.
Support continuous monitoring and maintain system compliance with security standards.
Collaborate with system administrators, engineers, ISSMs, and ISSOs to resolve cybersecurity findings.
Troubleshoot and resolve system and software issues to ensure secure and stable operation.
Develop and execute test plans, cases, and scripts to validate system functionality and security.
Document vulnerability findings, mitigation strategies, remediation efforts, and compliance results for stakeholders.
Design, develop, evaluate, and test system/software integration.
Interpret, assess, and support development and maintenance of requirements and software designs.