Information System Security Specialist II

Tri Star Engineering, Inc.; Bloomington (IN); On-site; USD 90,000 - 125,000; Full time

Job summary

Tri Star Engineering, Inc. is seeking an experienced Information System Security Specialist II in Bloomington, IN to support cybersecurity operations, secure software development, vulnerability management, security compliance, and system hardening for mission-critical applications and infrastructure.

The ideal candidate has hands-on experience with static code analysis tools (SonarQube), STIG analysis, ACAS vulnerability scanning, container security, and database hardening, with DoD RMF

Qualifications

• Bachelor's degree in Information Technology or related area.
• CompTIA Security+ certification prior to start date.
• US Citizenship required.
• Ability to obtain a secret clearance.
• Experience in cybersecurity engineering and vulnerability management.
• Hands-on with static code analysis tools (SonarQube preferred).
• Experience with STIG analysis and remediation.
• Experience with ACAS vulnerability scanning and remediation tracking.
• Knowledge of cybersecurity compliance and RMF processes.
• Experience with container security and database hardening.
• Automation scripting for security configuration and hardening.
• Experience securing PostgreSQL databases.
• Familiarity with Ansible for security automation.
• Vulnerability assessments and POA&Ms knowledge.
• Strong analytical and communication skills.
• Ability to collaborate with DoD stakeholders.

Responsibilities

• Support cybersecurity operations, secure software development, vulnerability management, and system hardening for mission-critical applications and infrastructure.
• Identify security vulnerabilities, assess compliance, and implement remediation strategies.
• Improve security automation across systems and applications.
• Collaborate with government stakeholders, software developers, and program personnel.
• Review and implement STIGs, perform vulnerability validation, and track remediation.
• Support DoD security compliance requirements and RMF processes.

Skills

Static code analysis

STIG analysis

ACAS vulnerability scanning

Container security

PostgreSQL security

RMF/DoD compliance

Automation scripting

Vulnerability remediation

Cybersecurity engineering

Technical communication

Education

Bachelor's degree in Information Technology or related area

CompTIA Security+ certification

Tools

SonarQube

ACAS

Nessus

Tenable Security Center

Job description

Description

TRISTAR is seeking an experienced Information System Security Specialist II in Bloomington, IN to support cybersecurity operations, secure software development, vulnerability management, security compliance, and system hardening for mission-critical applications and infrastructure. The ideal candidate will have hands‑on experience with static code analysis, STIG analysis and implementation, ACAS vulnerability scanning, container security, database hardening, and cybersecurity compliance within secure environments.

The Information System Security Specialist II will work closely with government stakeholders, software developers, and program personnel to identify security vulnerabilities, assess compliance, recommend and implement remediation strategies, and improve security automation across systems and applications.

Requirements

• Bachelor's degree in Information Technology or related area


• Must have or be able to obtain a CompTIA Security Plus certification prior to start date.


• US Citizen.


• Ability to obtain and maintain a secret clearance.


• Demonstrated experience in cybersecurity engineering, vulnerability management, system security engineering, or software security.


• Hands‑on experience with static code analysis tools, preferably SonarQube.


• Experience conducting STIG analysis and reviews, identifying compliance gaps, and supporting remediation activities.


• Experience with ACAS vulnerability scanning, scan result analysis, vulnerability validation, and remediation tracking.


• Knowledge of cybersecurity compliance requirements, security baselines, and vulnerability remediation processes.


• Experience with container security, system hardening, and STIG implementation.


• Experience developing or maintaining automation scripts for security configuration and hardening activities.


• Experience securing PostgreSQL databases or comparable relational database platforms.


• Familiarity with Ansible and reviewing automation playbooks for security compliance.


• Experience conducting vulnerability assessments, analyzing technical findings, and documenting corrective actions.


• Familiarity with POA&Ms and vulnerability remediation tracking.


• Strong analytical, troubleshooting, documentation, and technical communication skills.


• Ability to collaborate effectively with government customers, software developers, and multidisciplinary technical teams.


• Experience supporting cybersecurity efforts within Department of Defense (DoD) environments.


• Familiarity with DoD cybersecurity policies, Risk Management Framework (RMF) processes, and applicable security compliance requirements.


• Experience with ACAS, Tenable Security Center, Nessus, or comparable vulnerability scanning technologies.


• Experience evaluating STIG compliance across Linux-based systems, containerized environments, applications, and databases.


• Experience developing and maintaining POA&Ms.


• Experience with security automation, configuration management, and scripting languages.


• Experience integrating cybersecurity tools and supporting the testing and validation of software enhancements.

Comfort zones don't move missions forward. People do.

At TRISTAR, we're not looking for people who simply check the boxes. We're looking for problem‑solvers, innovators, and professionals who are ready to make an impact. Every challenge we tackle supports critical missions, and every team member plays a role in delivering results that matter. If you're driven by purpose, motivated by challenges, and ready to contribute to something bigger than yourself, we invite you to take the next step.

About TRISTAR

TRISTAR is an SBA certified Service‑Disabled Veteran‑Owned professional services company supporting the U.S. Department of Defense programs. Our core competencies include Electronic Warfare, Enterprise Management, Full Spectrum Cybersecurity, Information Technology, Digital Transformation, Software Engineering and Development, Maritime Modernization and Engineering, and Technical Solutions.

TRISTAR was founded in March 1995 and has built an employee‑focused collaborative environment which enables our team of professionals to create and deliver customized solutions to meet our customers' mission critical challenges. TRISTAR's core capabilities support customers with end‑to‑end solutions.

For over 30 years, TRISTAR has demonstrated and perfected our ability to successfully manage any task, small or large no matter how difficult or complex.

TRISTAR is proud to serve the Department of Defense and other Federal Agencies.

TRISTAR provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.