InfoSec Specialist II: DoD RMF, STIGs & Vuln Mgmt

TRISTAR; Bloomington (IN); On-site; USD 90,000 - 120,000; Full time

Job summary

TRISTAR seeks an experienced Information System Security Specialist II in Bloomington, IN to support cybersecurity operations, secure software development, vulnerability management, security compliance, and system hardening for mission-critical applications and infrastructure.

The role emphasizes hands-on work with static code analysis, STIG implementation, ACAS scanning, container security, database hardening, and DoD RMF compliance.

Qualifications

• Bachelor’s degree or higher in Information Technology or related field.
• Experience with cybersecurity engineering, vulnerability management, system security engineering, or software security.
• Ability to obtain and maintain a secret clearance.
• Hands-on with static code analysis tools, preferably SonarQube.
• Experience with STIG analysis and remediation.

Responsibilities

• Identify security vulnerabilities and assess compliance with DoD RMF processes.
• Develop and implement remediation strategies across systems and applications.
• Collaborate with government stakeholders, software developers, and program personnel to improve security automation.
• Support vulnerability assessments and remediation tracking across Linux, containerized environments, and databases.

Skills

Static code analysis

STIG analysis

ACAS vulnerability scanning

Container security

RMF / DoD compliance

DoD cyber security

Security automation

PostgreSQL hardening

Education

Bachelor’s degree in Information Technology or related area

Tools

SonarQube

ACAS

Tenable Security Center

Nessus

Ansible

Job description

TRISTAR seeks an experienced Information System Security Specialist II in Bloomington, IN to support cybersecurity operations, secure software development, vulnerability management, security compliance, and system hardening for mission-critical applications and infrastructure.

The role emphasizes hands-on work with static code analysis, STIG implementation, ACAS scanning, container security, database hardening, and DoD RMF compliance.