ISSE II – DoD RMF Security Engineer

Warrant Technologies, LLC; Bloomington (IN); On-site; USD 110,000 - 150,000; Full time

Job summary

Warrant Technologies is seeking an Information System Security Engineer (ISSE) Level II aligned with the DoD 8570/8140 IASAE Level II to provide mid-level security engineering support. This role develops RMF documentation and ensures security controls are properly configured in systems under development or sustainment.

The engineer will lead RMF package development, perform vulnerability assessments, and translate findings into actions using STIGs to resolve gaps, while bridging software and

Qualifications

• 5–9 years of cybersecurity engineering or related fields.
• Bachelor's degree or equivalent; degree may be substituted.
• IASAE Level II baseline qualification required.

Responsibilities

• Leads RMF package development, update and submission in government repositories.
• Performs security control assessments and creates POA&Ms.
• Conducts automated and manual vulnerability assessments with ACAS and SCAP.
• Translates findings into actions applying STIGs and remediation.
• Serves as liaison between development/engineering and ISSM.
• Supports change boards to protect system posture.
• Analyzes security logs and assists in incident response.

Skills

RMF Package

Vulnerability assessment

DISA STIGs

Incident response

HBSS/ESS

SIEM

ACAS

Education

Bachelor's degree in CS/IS/related

Tools

ACAS (Nessus)

HBSS/ESS

SCAP

SIEM

eMASS

Job description

Description

Warrant Technologies is seeking an Information System Security Engineer (ISSE) Level II—aligned with the DoD 8570/8140 IASAE Level II (Information Assurance System Architecture and Engineering) to provide mid-level systems security engineering support. This role is responsible for implementing security designs, developing Risk Management Framework (RMF) documentation, and ensuring that security controls are properly configured and integrated into systems under development or in sustainment.

Responsibilities:

Leads the development, update, and submission of the RMF packages inside government repositories (e.g., eMASS).

Conducts security control assessments, draft Plans of Action and Milestones (POA&Ms), and maintains system continuous monitoring strategies.

Performs automated and manual vulnerability assessments using tools like ACAS (Nessus) and SCAP.

Translates findings into action by applying Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs) and resolving compliance gaps.

Serves as the primary bridge between the software development/systems engineering team and the Information System Security Manager (ISSM).

Participates in engineering change boards to ensure modifications do not compromise system posture.

Assists in analyzing security logs, detecting anomalies, and providing system-level technical support during incident response or forensic investigations.

Applies system security engineering principles to implement secure designs, secure configurations, and boundary defenses (firewalls, IDS/IPS, access controls).

Ensures standard security tools (e.g., HBSS/ESS, ACAS, SIEM) are properly integrated.

Requirements

• Minimum of 5 to 9 years of direct experience in cybersecurity engineering, systems engineering, or network administration

• Bachelor's degree in computer science, Information Assurance, System Engineering, or a related technical discipline. Direct experience may substitute for the degree requirements on a case-by-case basis

• Must meet the IASAE Level II baseline qualification requirements

• Security+

•Security Clearance: Secret