DoD RMF Information Security Engineer II

Star3; Bloomington, Northern (IN, KY); Hybrid; USD 90,000 - 130,000; Full time

Job summary

TRISTAR is seeking an Information System Security Engineer II to provide mid-level cybersecurity and systems security engineering support for DoD systems across lifecycle stages. The role requires translating cybersecurity requirements into practical engineering solutions and collaborating with software, systems, and ISSM teams.

The candidate should have DoD RMF experience, applicable certifications, and the ability to work with government customers while maintaining secure configurations and

Qualifications

• Bachelor's degree or equivalent in a relevant technical field.
• 5–9 years in cybersecurity engineering or related discipline.
• Experience with RMF activities and ATO processes.
• Experience with vulnerability assessments and DoD security controls.

Responsibilities

• Develop, update, and submit RMF packages (eMASS).
• Support RMF lifecycle activities from categorization to continuous monitoring.
• Prepare SSPs, SARs, POA&Ms and other artifacts.
• Perform vulnerability assessments and translate findings into remediation.
• Apply DISA STIGs and SRGs to systems and components.
• Coordinate with engineering and ISSM teams to ensure security requirements.
• Maintain security configurations and documentation.
• Support security incidents and investigations as required.

Skills

RMF activities

Vulnerability assessment

DISA STIGs

eMASS / Xacta

Security+ / IASAE II

DoD requirements

Communications with stakeholders

Education

Bachelor's degree in CS / Cybersecurity / Systems Engineering

Tools

ACAS / Nessus

SCAP

HBSS/ESS

SIEM / IDS/IPS

Job description

TRISTAR is seeking an Information System Security Engineer II to provide mid-level cybersecurity and systems security engineering support for DoD systems across lifecycle stages. The role requires translating cybersecurity requirements into practical engineering solutions and collaborating with software, systems, and ISSM teams.

The candidate should have DoD RMF experience, applicable certifications, and the ability to work with government customers while maintaining secure configurations and