Information System Security Specialist II

Tristar•Bloomington, IN

11d

About The Position

TRISTAR is seeking an experienced Information System Security Specialist II in Bloomington, Indiana, to support cybersecurity operations, secure software development, vulnerability management, security compliance, and system hardening for mission-critical applications and infrastructure. The role works closely with government stakeholders, software developers, and program personnel to identify security vulnerabilities, assess compliance, recommend and implement remediation strategies, and improve security automation across systems and applications. TRISTAR is an SBA-certified Service-Disabled Veteran-Owned professional services company supporting U.S. Department of Defense programs. Its core competencies include Electronic Warfare, Enterprise Management, Full Spectrum Cybersecurity, Information Technology, Digital Transformation, Software Engineering and Development, Maritime Modernization and Engineering, and Technical Solutions. Founded in March 1995, TRISTAR describes its workplace as employee-focused and collaborative, supporting customized solutions for mission-critical customer challenges. TRISTAR provides equal employment opportunities and prohibits discrimination and harassment.

Requirements

Bachelor's degree in Information Technology or a related area.
Must have or be able to obtain CompTIA Security+ certification before the start date.
Must be a U.S. citizen.
Ability to obtain and maintain a Secret clearance.
Demonstrated experience in cybersecurity engineering, vulnerability management, system security engineering, or software security.
Hands-on experience with static code analysis tools; SonarQube is preferred.
Experience conducting STIG analysis and reviews, identifying compliance gaps, and supporting remediation.
Experience with ACAS vulnerability scanning, scan result analysis, vulnerability validation, and remediation tracking.
Knowledge of cybersecurity compliance requirements, security baselines, and vulnerability remediation processes.
Experience with container security, system hardening, and STIG implementation.
Experience developing or maintaining automation scripts for security configuration and hardening.
Experience securing PostgreSQL databases or comparable relational database platforms.
Familiarity with Ansible and reviewing automation playbooks for security compliance.
Experience conducting vulnerability assessments, analyzing technical findings, and documenting corrective actions.
Familiarity with POA&Ms and vulnerability remediation tracking.
Strong analytical, troubleshooting, documentation, and technical communication skills.
Ability to collaborate effectively with government customers, software developers, and multidisciplinary technical teams.

Nice To Haves

Experience supporting cybersecurity efforts within Department of Defense environments.
Familiarity with DoD cybersecurity policies, Risk Management Framework processes, and applicable security compliance requirements.
Experience with ACAS, Tenable Security Center, Nessus, or comparable vulnerability scanning technologies.
Experience evaluating STIG compliance across Linux-based systems, containerized environments, applications, and databases.
Experience developing and maintaining POA&Ms.
Experience with security automation, configuration management, and scripting languages.
Experience integrating cybersecurity tools and supporting the testing and validation of software enhancements.

Responsibilities

Support cybersecurity operations, secure software development, vulnerability management, security compliance, and system hardening for mission-critical applications and infrastructure.
Work with government stakeholders, software developers, and program personnel to identify security vulnerabilities and assess compliance.
Recommend and implement security remediation strategies.
Improve security automation across systems and applications.
Conduct static code analysis and STIG analysis and reviews, identify compliance gaps, and support remediation.
Conduct ACAS vulnerability scans, analyze scan results, validate vulnerabilities, and track remediation.
Perform vulnerability assessments, analyze technical findings, and document corrective actions.
Implement system hardening and STIG requirements, including for Linux-based systems, containerized environments, applications, and databases.
Develop or maintain automation scripts for security configuration and hardening activities.
Secure PostgreSQL or comparable relational database platforms.
Review Ansible automation playbooks for security compliance.
Develop and maintain POA&Ms and track vulnerability remediation.
Integrate cybersecurity tools and support testing and validation of software enhancements.