Junior Information System Security Engineer (ISSE)

ARA•Raleigh, NC

6h•Onsite

About The Position

Applied Research Associates (ARA), Inc. is seeking a Junior Information Systems Security Engineer (ISSE) in Raleigh, NC to support the implementation, testing, documentation, and maintenance of technical security controls across classified Windows, Linux, network, and security-platform environments. Working with senior cybersecurity personnel, the ISSE will gain hands-on experience with Splunk, ACAS/Tenable, Microsoft Defender, STIG/SCAP compliance, vulnerability remediation, automation, and RMF evidence while supporting secure and inspection-ready mission operations. This position is intended for a technical professional who has strong information technology fundamentals and wants to grow in cybersecurity engineering. The ISSE will receive guidance from senior personnel while developing hands-on experience with security engineering, vulnerability management, system hardening, monitoring, and RMF evidence.

Requirements

US Citizen with an active DoD Top Secret clearance; SCI eligibility preferred
High School Diploma and equivalent professional experience (at least 6 years) will be considered for talented candidates without a degree or Bachelor’s degree in computer science or a related field with 0-2 years of relevant experience.
2+ years of relevant information technology, systems administration, network administration, cybersecurity, help-desk escalation or military.
Foundational knowledge of Windows or Linux administration and basic networking concepts such as TCP/IP, DNS, DHCP, VLANs, routing, firewalls, and access controls.
Ability to demonstrate knowledge of system hardening, security monitoring, or technical-control validation.
Ability to follow technical procedures, document results, troubleshoot methodically, and communicate issues clearly.
Ability to meet DoD 8570 / 8140 cybersecurity workforce qualification requirements applicable to the assigned work role.

Nice To Haves

Exposure to one or more of the following: Splunk, Forescout, ACAS/Tenable, Microsoft Defender, Active Directory, Group Policy, RHEL/Linux, virtualization, Cisco networking, STIGs, SCAP, or eMASS.
Experience supporting classified, DoD, DCSA, RMF, or other regulated information-system environments.
Experience with PowerShell, Ansible, or another automation or scripting technology.

Responsibilities

Assist with the implementation, testing, and maintenance of technical security controls for assigned classified information systems.
Support ACAS/Tenable vulnerability and compliance scanning, validate scan coverage and credentials, review findings, and coordinate remediation with system and network administrators.
Apply and validate applicable STIGs, SCAP content, configuration baselines, patches, and approved hardening requirements for Windows, Linux, network, and virtual systems.
Support Microsoft Defender, Windows security settings, Active Directory, Group Policy, BitLocker, certificates, host firewalls, and endpoint logging.
Assist with troubleshooting security-control failures involving endpoints, servers, network devices, authentication services, vulnerability scanners, and monitoring tools.
Collect, organize, and quality-check technical evidence for RMF packages, continuous monitoring, assessments, POA&M validation, and DCSA or customer reviews.
Prepare or support implementation, testing, validation, and rollback plans for approved configuration changes and participate in Configuration Control Board activities.
Use PowerShell, or similar tools to automate recurring technical checks, evidence collection, reporting, and system-administration tasks.
Support incident investigation, log collection, containment, recovery, and post-incident validation as directed.
Coordinate effectively with ISSOs, the assigned ISSM, Security Engineers, System Administrators, and Program Personnel.