About The Position
Applied Research Associates, Inc. (ARA) is seeking an Information System Security Engineer for its Raleigh, North Carolina division. The role works on a dynamic team to develop, test, and validate Department of Defense Risk Management Framework (RMF) security controls across cloud environments. The position offers opportunities for technical and professional growth, mentorship, teamwork, and cross-training across cybersecurity and engineering disciplines. The engineer collaborates with system administrators, software developers, and customers to identify and remediate cybersecurity vulnerabilities. They deploy and manage security tools using Infrastructure as Code (IaC) and Configuration as Code (CaC), including ACAS, Splunk, Microsoft Defender, and Clam AV, to monitor system health, assess security compliance, and investigate findings. They also apply DISA Security Technical Implementation Guides (STIGs), security best practices, and configuration management processes to harden systems and maintain compliance with DoD cybersecurity requirements. The position requires onsite work three days per week in Raleigh, NC.
Requirements
- U.S. citizenship; selected applicants will undergo a security investigation and must meet eligibility requirements at the time of employment.
- Bachelor’s degree or higher in Cybersecurity, Computer Science, Information Technology, Engineering, Applied Mathematics, or a closely related field.
- Active AWS certification.
- 2–4 years of relevant work experience with a bachelor’s degree, or 0–2 years of relevant work experience with a master’s degree.
- Excellent communication, documentation, and collaboration skills.
- Ability to work onsite three days per week in Raleigh, NC.
Nice To Haves
- At least 2 years of hands-on experience implementing IaC and CaC.
- At least 3 years of hands-on experience administering Windows and Linux systems.
- AWS Solutions Architect or Security Specialty certification.
- CompTIA Security+ certification.
- Active DoD Secret clearance at the time of hire.
- Experience supporting or implementing the DoD RMF.
- Experience with ACAS and other vulnerability scanners.
- Experience using security monitoring and endpoint protection tools such as Splunk, Microsoft Defender, and Clam AV.
- Experience applying DISA STIGs and Security Requirement Guides (SRGs).
- Experience identifying, prioritizing, and remediating operating system, application, and infrastructure vulnerabilities.
- Familiarity with continuous monitoring, vulnerability management, and security compliance processes.
Responsibilities
- Collaborate with system administrators, software developers, and customers to identify and remediate cybersecurity vulnerabilities.
- Deploy and manage security tools using Infrastructure as Code (IaC) and Configuration as Code (CaC), including ACAS, Splunk, Microsoft Defender, and Clam AV.
- Monitor system health, assess security compliance, and investigate security findings.
- Apply DISA Security Technical Implementation Guides (STIGs), security best practices, and configuration management processes to harden systems and maintain compliance with DoD cybersecurity requirements.
- Develop, test, and validate DoD RMF security controls across cloud environments.
Benefits
- Employee ownership, which gives employees a voice in company decisions.
- Learning opportunities, mentorship, and cross-training to support technical and professional growth.
- Women’s Initiative Network (WIN), which supports and encourages women’s professional career development.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Entry Level
