Junior Information System Security Engineer (ISSE)

Applied Research Associates, Inc. (ARA); Raleigh (NC); On-site; USD 65,000 - 90,000; Full time

Job summary

Applied Research Associates, Inc. (ARA) in Raleigh, NC seeks a Junior Information System Security Engineer to implement and test security controls across classified Windows, Linux, and network environments.

You will work with senior cybersecurity personnel to gain hands-on experience with RMF evidence, vulnerability remediation, and security monitoring. This role offers growth in cybersecurity engineering with guidance from senior staff as you develop skills in system hardening, evidence

Qualifications

• US citizen with an active DoD Top Secret clearance; SCI eligibility preferred.
• High School Diploma or equivalent; 0–2 years for candidates without a degree.
• 2+ years in IT, cybersecurity, or related field.
• Foundational Windows/Linux admin knowledge and basic networking concepts.
• Ability to follow procedures, document results, troubleshoot, and communicate clearly.
• Must meet DoD 8570/8140 cybersecurity workforce requirements.

Responsibilities

• Assist with implementing, testing, and maintaining security controls for classified information systems.
• Support ACAS/Tenable vulnerability scanning, validate results, coordinate remediation with admins.
• Apply STIGs/SCAP, configuration baselines, patches, and hardening for Windows, Linux, and networks.
• Support Microsoft Defender, AD, Group Policy, BitLocker, certificates, and endpoint logging.
• Troubleshoot security-control failures across endpoints, servers, and network devices.
• Collect, organize, and quality-check RMF evidence for packages and reviews.
• Prepare or support configuration-change plans and participate in change boards.
• Use PowerShell or similar tools to automate checks, evidence collection, reporting.
• Support incident investigation, logging, containment, and post-incident validation.
• Coordinate with ISSOs, ISSM, Security Engineers, and program personnel.

Skills

Windows administration

Linux administration

Networking fundamentals

PowerShell scripting

RMF knowledge

Vulnerability management

Documentation skills

Communication skills

Education

High School Diploma

Bachelor's degree in Computer Science

Tools

ACAS/Tenable

Splunk

Microsoft Defender

Active Directory

Group Policy

STIG/SCAP

PowerShell

Job description

Applied Research Associates (ARA), Inc. is seeking a Junior Information Systems Security Engineer (ISSE) in Raleigh, NC to support the implementation, testing, documentation, and maintenance of technical security controls across classified Windows, Linux, network, and security-platform environments. Working with senior cybersecurity personnel, the ISSE will gain hands-on experience with Splunk, ACAS/Tenable, Microsoft Defender, STIG/SCAP compliance, vulnerability remediation, automation, and RMF evidence while supporting secure and inspection-ready mission operations.

This position is intended for a technical professional who has strong information technology fundamentals and wants to grow in cybersecurity engineering. The ISSE will receive guidance from senior personnel while developing hands-on experience with security engineering, vulnerability management, system hardening, monitoring, and RMF evidence.

Junior Information System Security Engineer Primary Responsibilities:

• Assist with the implementation, testing, and maintenance of technical security controls for assigned classified information systems.
• Support ACAS/Tenable vulnerability and compliance scanning, validate scan coverage and credentials, review findings, and coordinate remediation with system and network administrators.
• Apply and validate applicable STIGs, SCAP content, configuration baselines, patches, and approved hardening requirements for Windows, Linux, network, and virtual systems.
• Support Microsoft Defender, Windows security settings, Active Directory, Group Policy, BitLocker, certificates, host firewalls, and endpoint logging.
• Assist with troubleshooting security-control failures involving endpoints, servers, network devices, authentication services, vulnerability scanners, and monitoring tools.
• Collect, organize, and quality-check technical evidence for RMF packages, continuous monitoring, assessments, POA&M validation, and DCSA or customer reviews.
• Prepare or support implementation, testing, validation, and rollback plans for approved configuration changes and participate in Configuration Control Board activities.
• Use PowerShell, or similar tools to automate recurring technical checks, evidence collection, reporting, and system-administration tasks.
• Support incident investigation, log collection, containment, recovery, and post-incident validation as directed.
• Coordinate effectively with ISSOs, the assigned ISSM, Security Engineers, System Administrators, and Program Personnel.

Junior Information System Security Engineer Qualifications:

• US Citizen with an active DoD Top Secret clearance; SCI eligibility preferred.
• High School Diploma and equivalent professional experience (at least 6 years) will be considered for talented candidates without a degree or Bachelors degree in computer science or a related field with 0-2 years of relevant experience.
• 2+ years of relevant information technology, systems administration, network administration, cybersecurity, help-desk escalation or military.
• Foundational knowledge of Windows or Linux administration and basic networking concepts such as TCP/IP, DNS, DHCP, VLANs, routing, firewalls, and access controls.
• Ability to demonstrate knowledge of system hardening, security monitoring, or technical-control validation.
• Ability to follow technical procedures, document results, troubleshoot methodically, and communicate issues clearly.
• Ability to meet DoD 8570 / 8140 cybersecurity workforce qualification requirements applicable to the assigned work role.

Junior Information System Security Engineer Preferences:

• Exposure to one or more of the following: Splunk, Forescout, ACAS/Tenable, Microsoft Defender, Active Directory, Group Policy, RHEL/Linux, virtualization, Cisco networking, STIGs, SCAP, or eMASS.
• Experience supporting classified, DoD, DCSA, RMF, or other regulated information-system environments.
• Experience with PowerShell, Ansible, or another automation or scripting technology.

Who is ARA?

Do you want to work for a purpose? Applied Research Associates, Inc. (aka ARA) is an employee-owned international research and engineering company. We have been providing technically superior solutions to complex and challenging problems in the physical sciences since 1979. ARA has over 2,279 employee owners and continues to grow rapidly. Together, our offices throughout the U.S. and Canada provide a broad range of technical expertise in defense, civil, and health technologies, computer software and simulation, systems analysis, environmental technologies, and testing and measurement.

ARA also prides itself, on having a challenging culture where innovation & experimentation are the norm. The motto, Engineering and Science for Fun and Profit sums up the ARA experience. Employee ownership ensures you have a voice with what happens in the company.

To find out more about what the Integrated Mission Systems Sector has to offer, visit our website at https://www.ara.com/raleigh/

To learn more about our generous benefits program including health, life & disability, retirement, flexible spending, rewards & recognition, work/life balance, professional development and relocation visit https://www.ara.com/benefits/