DoD ISSE II: Secure Systems RMF Engineer

Socket.dev; Bloomington (IN); On-site; USD 90,000 - 120,000; Full time

Job summary

TRISTAR is seeking an Information System Security Engineer II to provide mid-level cybersecurity and systems security engineering in DoD contexts. You will develop RMF documentation, assess controls, and ensure compliance across the system lifecycle.

You will liaise with software, systems and ISSM teams to translate requirements into practical engineering solutions, supporting secure architectures and defense-in-depth implementations.

Qualifications

• Experience supporting RMF activities and DoD security authorization.
• Experience with RMF artifacts in eMASS or similar repositories.
• Proficient in vulnerability assessments and remediation.
• Understanding of DISA STIGs and SRGs.
• U.S. citizenship and ability to obtain security clearance.
• DoD 8570/8140 IASAE II or equivalent.

Responsibilities

• Develop, update, maintain, and submit RMF security packages (eMASS).
• Support RMF lifecycle activities: categorization, control implementation, assessment, authorization, monitoring.
• Create and maintain System Security Plans, SARs, POA&Ms and related artifacts.
• Conduct control assessments and remediate deficiencies.
• Implement continuous monitoring strategies for compliance.
• Analyze vulnerability scanning results and translate to remediation actions.
• Apply STIGs/SRGs to OS, apps, DBs, networks, containers.

Skills

RMF

Vulnerability assessment

DoD cybersecurity

Security controls

Technical liaison

Windows/Linux security

Communication skills

CompTIA Security+

Education

Bachelor's degree in Computer Science/Info Assurance/Cybersecurity/Systems Engineering

Tools

eMASS

Xacta

ACAS/Nessus

HBSS/ESS

SIEM

IDS/IPS

Job description

TRISTAR is seeking an Information System Security Engineer II to provide mid-level cybersecurity and systems security engineering in DoD contexts. You will develop RMF documentation, assess controls, and ensure compliance across the system lifecycle.

You will liaise with software, systems and ISSM teams to translate requirements into practical engineering solutions, supporting secure architectures and defense-in-depth implementations.