ISSE II: DoD RMF Security & Compliance Engineer

Star3; Bloomington, Northern (IN, KY); Hybrid; USD 90,000 - 150,000; Full time

Job summary

TRISTAR is seeking an Information System Security Engineer II to support DoD programs across the system development lifecycle. The role focuses on implementing secure architectures, RMF documentation, and continuous monitoring to ensure compliance with DoD cybersecurity requirements.

The ISSE II will liaise between development, engineering, network teams, and ISSM personnel to translate security requirements into practical solutions, addressing vulnerabilities and ensuring a robust

Qualifications

• Bachelor's degree in Computer Science, Information Assurance, Cybersecurity, Systems Engineering, Information Technology, or a related technical field.
• DoD 8570/8140 IASAE Level II or equivalent qualification.
• U.S. Citizen and ability to obtain security clearance.

Responsibilities

• Develop and maintain RMF security packages (eMASS, etc.).
• Support RMF lifecycle activities including categorization, control implementation, assessment, authorization, and continuous monitoring.
• Prepare SSPs, SARs, POA&Ms and other cybersecurity artifacts.
• Conduct security control assessments and remediation planning.
• Apply DISA STIGs and SRGs to operating systems, applications, databases, and networks.
• Coordinate with ISSM, developers, and system administrators to implement security requirements.

Skills

RMF experience

Vulnerability assessment

Security engineering

DoD policies

Communication skills

Independent worker

Education

Bachelor's degree in CS/IT/related field

Tools

ACAS/Nessus

eMASS

Xacta

HBSS/ESS

SIEM

IDS/IPS

SCAP

DISA STIGs

Job description

TRISTAR is seeking an Information System Security Engineer II to support DoD programs across the system development lifecycle. The role focuses on implementing secure architectures, RMF documentation, and continuous monitoring to ensure compliance with DoD cybersecurity requirements.

The ISSE II will liaise between development, engineering, network teams, and ISSM personnel to translate security requirements into practical solutions, addressing vulnerabilities and ensuring a robust