Specialist, Information System Security II

Elevate Ventures; Bloomington (IN); On-site; USD 90,000 - 130,000; Full time

Job summary

Warrant Technologies is seeking an Information System Security Engineer (ISSE) Level II aligned with the DoD IASAE Level II to provide mid-level security engineering support for systems under development or sustainment.

You will lead RMF documentation, perform vulnerability assessments with ACAS/Nessus, apply STIGs, and ensure security controls are properly configured while collaborating with software development teams and the ISSM.

Qualifications

• 5–9 years of direct cybersecurity/engineering experience.
• Bachelor's degree in CS, IA, or systems engineering; degree substitution allowed on a case-by-case basis.
• Security+ certification.
• Security Clearance: Secret.

Responsibilities

• Lead RMF package development and submission in government repositories (eMASS).
• Conduct security control assessments and draft POA&Ms; maintain monitoring strategies.
• Perform automated/manual vulnerability assessments using ACAS (Nessus) and SCAP.
• Translate findings into actions by applying STIGs and resolving compliance gaps.
• Serve as liaison between development/engineering teams and the ISSM.
• Participate in engineering change boards to ensure modifications do not degrade posture.
• Assist in analyzing security logs and supporting incident response/forensics.

Skills

RMF documentation

Security engineering

Vulnerability assessment

Security controls engineering

Education

Bachelor's degree in CS/IA/Systems Engineering

Tools

ACAS

Nessus

SCAP

eMASS

HBSS

Job description

Description

Warrant Technologies is seeking an Information System Security Engineer (ISSE) Level II- aligned with the DoD 8570/8140 IASAE Level II (Information Assurance System Architecture and Engineering) to provide mid-level systems security engineering support. This role is responsible for implementing security designs, developing Risk Management Framework (RMF) documentation, and ensuring that security controls are properly configured and integrated into systems under development or in sustainment.

Responsibilities:

Leads the development, update, and submission of the RMF packages inside government repositories (e.g., eMASS).

Conducts security control assessments, draft Plans of Action and Milestones (POA&Ms), and maintains system continuous monitoring strategies.

Performs automated and manual vulnerability assessments using tools like ACAS (Nessus) and SCAP.

Translates findings into action by applying Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs) and resolving compliance gaps.

Serves as the primary bridge between the software development/systems engineering team and the Information System Security Manager (ISSM).

Participates in engineering change boards to ensure modifications do not compromise system posture.

Assists in analyzing security logs, detecting anomalies, and providing system-level technical support during incident response or forensic investigations.

Applies system security engineering principles to implement secure designs, secure configurations, and boundary defenses (firewalls, IDS/IPS, access controls).

Ensures standard security tools (e.g., HBSS/ESS, ACAS, SIEM) are properly integrated.

Requirements

• Minimum of 5 to 9 years of direct experience in cybersecurity engineering, systems engineering, or network administration
• Bachelor's degree in computer science, Information Assurance, System Engineering, or a related technical discipline. Direct experience may substitute for the degree requirements on a case-by-case basis
• Must meet the IASAE Level II baseline qualification requirements
• Security+
• Security Clearance: Secret