DoD RMF ISSE II - Cybersecurity Engineer

TRISTAR; Bloomington (IN); On-site; USD 110,000 - 150,000; Full time

Job summary

TRISTAR is seeking an Information System Security Engineer II to support DoD systems throughout the lifecycle. You will implement secure architectures, develop RMF documentation, assess controls, and remediate vulnerabilities to stay compliant with DoD requirements.

You will collaborate with software, systems, network teams, ISSMs, and government customers. Required: 5–9 years in cybersecurity engineering, RMF experience, DoD familiarity, US citizenship, and ability to obtain a clearance.

Qualifications

• 5–9 years of professional experience in cybersecurity engineering or related fields.
• Experience with RMF activities and security authorization processes.
• Experience developing or maintaining RMF documentation in eMASS or similar repositories.
• Experience performing vulnerability assessments with ACAS/Nessus/SCAP.
• Knowledge of DISA STIGs, SRGs, security controls and compliance.
• Ability to obtain DoD security clearance and U.S. citizenship.

Responsibilities

• Develop and maintain RMF security packages within government tools (eMASS, Xacta).
• Support RMF lifecycle activities: categorization, control implementation, assessment, authorization, monitoring.
• Prepare SSPs, SARs, POA&Ms and other cybersecurity artifacts.
• Conduct security control assessments and remediation tracking.
• Apply STIGs to Windows, Linux, networks, apps, and databases as applicable.
• Collaborate with ISSMs, developers, and admins to address security gaps.

Skills

Security engineering

RMF implementation

Vulnerability remediation

DoD compliance

Communication skills

Independent work

Education

Bachelor's degree in CS/IS/C cybersecurity

Equivalent experience

Tools

ACAS/Nessus

SCAP

HBSS/ESS

SIEM

IDS/IPS

Endpoint security

eMASS

Xacta

Job description

TRISTAR is seeking an Information System Security Engineer II to support DoD systems throughout the lifecycle. You will implement secure architectures, develop RMF documentation, assess controls, and remediate vulnerabilities to stay compliant with DoD requirements.

You will collaborate with software, systems, network teams, ISSMs, and government customers. Required: 5–9 years in cybersecurity engineering, RMF experience, DoD familiarity, US citizenship, and ability to obtain a clearance.