DoD RMF Security Engineer II: Secure Systems

TRISTAR INC; Bloomington (IN); On-site; USD 85,000 - 125,000; Full time

Job summary

TRISTAR INC seeks an Information System Security Engineer II to provide mid-level cybersecurity and systems security engineering for DoD systems across the lifecycle. You will implement secure architectures, develop RMF documentation, and assess security controls while collaborating with software, systems, and ISSM teams.

The role requires translating cybersecurity requirements into practical engineering solutions, supporting continuous monitoring, and remediation of vulnerabilities, with DoD

Qualifications

• 5–9 years in cybersecurity engineering or related technical discipline
• Experience with DoD RMF activities and security authorization processes
• Experience developing or maintaining RMF documentation in eMASS or similar repositories
• DoD 8570/8140 IASAE II or equivalent qualification
• US citizenship and ability to obtain security clearance

Responsibilities

• Develop and submit RMF security authorization packages (eMASS)
• Support RMF lifecycle activities from categorization to continuous monitoring
• Create and maintain SSPs, SARs, POA&Ms, and other artifacts
• Conduct security control assessments and remediate deficiencies
• Apply DISA STIGs and SRGs across systems
• Collaborate with ISSM, developers, and admins to ensure secure designs
• Support security configurations, boundary protections, and defense-in-depth strategies
• Analyze logs for anomalies and assist in incident investigations

Skills

RMF expertise

Security engineering

Vulnerability assessment

Communication skills

DoD policy knowledge

Education

Bachelor's degree in Computer Science / Information Assurance / Cybersecurity

Tools

ACAS/Nessus

eMASS

Xacta

HBSS/ESS

SIEM

IDS/IPS

DISA STIGs

Job description

TRISTAR INC seeks an Information System Security Engineer II to provide mid-level cybersecurity and systems security engineering for DoD systems across the lifecycle. You will implement secure architectures, develop RMF documentation, and assess security controls while collaborating with software, systems, and ISSM teams.

The role requires translating cybersecurity requirements into practical engineering solutions, supporting continuous monitoring, and remediation of vulnerabilities, with DoD