DoD Cybersecurity Engineer II: RMF, Vulnerability & Hardening

Star3; Bloomington (IN); On-site; USD 100,000 - 150,000; Full time

Job summary

TRISTAR seeks an experienced Information System Security Specialist II in Bloomington, IN to support cybersecurity operations, secure software development, vulnerability management, and system hardening for mission-critical systems. The ideal candidate will have hands-on experience with static code analysis, STIG analysis, ACAS vulnerability scanning, container security, and PostgreSQL hardening, along with familiarity with Ansible and security automation.

U.S.

Qualifications

• Bachelor's degree in Information Technology or related field.
• Must obtain CompTIA Security+ certification prior to start date.
• U.S. Citizenship is required.
• Ability to obtain and maintain a secret clearance.
• Hands-on experience with cybersecurity engineering, vulnerability management, system security engineering, or software security.
• Hands-on experience with static code analysis tools, preferably SonarQube.
• Experience conducting STIG analysis and remediation activities.
• Experience with ACAS vulnerability scanning and remediation tracking.
• Knowledge of cybersecurity compliance requirements and security baselines.
• Experience with container security and system hardening, including STIG implementation.
• Experience developing automation scripts for security configuration and hardening.

Responsibilities

• Support cybersecurity operations, secure software development, and system hardening for mission-critical apps and infrastructure.
• Identify security vulnerabilities, assess compliance, and implement remediation strategies.
• Improve security automation across systems and applications in collaboration with DoD stakeholders.
• Work with government customers and developers to address findings and track remediation.
• Assist in maintaining RMF/DoD security posture and documentation.

Skills

Cybersecurity engineering

Vulnerability management

System security engineering

Software security

Static code analysis

STIG analysis

ACAS vulnerability scanning

Container security

Database hardening

Security automation

Scripting languages

RMF / DoD policies

Communication skills

Education

Bachelor's degree in Information Technology or related area

Tools

SonarQube

ACAS

Tenable Security Center

Nessus

Ansible

PostgreSQL

Job description

TRISTAR seeks an experienced Information System Security Specialist II in Bloomington, IN to support cybersecurity operations, secure software development, vulnerability management, and system hardening for mission-critical systems. The ideal candidate will have hands-on experience with static code analysis, STIG analysis, ACAS vulnerability scanning, container security, and PostgreSQL hardening, along with familiarity with Ansible and security automation.

U.S.