Information System Security Engineer (ISSE) – Risk Management Framework (RMF), AWS, ACAS, Splunk

ARA•San Antonio, TX

2d•Hybrid

About The Position

Applied Research Associates, Inc. (ARA) is seeking a bright, motivated, and energetic Information System Security Engineer (ISSE) to join their team. This role involves designing, securing, and improving information systems through the Department of Defense (DoD) Risk Management Framework (RMF), with opportunities to solve challenging cybersecurity problems and grow your career in an environment that promotes teamwork, mentorship, and cross-training. The ISSE will participate in a dynamic team to develop, test, and validate DoD RMF security controls across cloud environments, with learning opportunities to enhance technical and professional skills.

Requirements

US citizenship (Selected applicants will undergo a security investigation and must meet eligibility requirements at the time of employment)
Active DoD Secret Clearance (At the time of hire)
BS or higher in Cybersecurity, Computer Science, Information Technology, Engineering, Applied Mathematics, or a closely related field
2-4 years of relevant work experience with a bachelor’s degree, or 0-2 years of relevant work experience with a master’s degree
Excellent communication, documentation, and collaboration skills
Ability to work onsite 3 days per week in Raleigh, NC or San Antonio, TX

Nice To Haves

Relevant AWS Certification
CompTIA Security +
Experience supporting or implementing the DoD RMF
Experience with ACAS and other vulnerability scanners
Experience using security monitoring and endpoint protection tools such as Splunk, Microsoft Defender, and Clam AV
Experience applying DISA STIGs and Security Requirement Guides (SRGs)
Experience identifying, prioritizing, and remediating operating system, application, and infrastructure vulnerabilities
Familiarity with continuous monitoring, vulnerability management, and security compliance processes
Experience with cloud platforms such as AWS or Azure
Experience with Infrastructure as Code (IaC) and/or Configuration as Code (CaC) tools such as Terraform, Salt, or Ansible
Familiarity with Windows and Linux systems administration

Responsibilities

Work alongside system administrators, software developers, and customers to identify and remediate cybersecurity vulnerabilities.
Manage tools such as Assured Compliance Assessment Solution (ACAS), Splunk, Microsoft Defender, and Clam AV to monitor system health, assess security compliance, and investigate findings.
Apply Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIG), security best practices, and configuration management processes to harden systems and maintain compliance with DoD cybersecurity requirements.