Specialist, Information System Security II

Socket.dev; Bloomington (IN); On-site; USD 110,000 - 150,000; Full time

Job summary

Warrant Technologies in Bloomington, IN, USA is seeking an Information System Security Engineer (ISSE) Level II aligned with DoD IASAE II to provide mid-level security engineering support. You will implement security designs, develop RMF documentation, and ensure security controls are properly configured for systems under development or sustainment.

Responsibilities include leading RMF package activities in government repositories, performing vulnerability assessments, and applying STIGs to

Qualifications

• 5–9 years of direct cybersecurity engineering or systems engineering experience.
• Bachelor's degree or equivalent experience in a technical field.
• IASAE Level II baseline qualification or ability to meet it.

Responsibilities

• Lead RMF package development and submission in government repositories.
• Perform security control assessments and draft POA&Ms.
• Conduct automated and manual vulnerability assessments (ACAS/Nessus, SCAP).
• Apply STIGs to resolve compliance gaps and maintain system posture.
• Bridge software development and ISSM teams, ensuring secure designs.
• Support incident response and forensic analysis with system-level expertise.

Skills

Cybersecurity engineering

Systems engineering

Network administration

Education

Bachelor's degree in Computer Science or related

Job description

Description

Warrant Technologies is seeking an Information System Security Engineer (ISSE) Level II—aligned with the DoD 8570/8140 IASAE Level II (Information Assurance System Architecture and Engineering) to provide mid-level systems security engineering support. This role is responsible for implementing security designs, developing Risk Management Framework (RMF) documentation, and ensuring that security controls are properly configured and integrated into systems under development or in sustainment.

Responsibilities

Leads the development, update, and submission of the RMF packages inside government repositories (e.g., eMASS).

Conducts security control assessments, draft Plans of Action and Milestones (POA&Ms), and maintains system continuous monitoring strategies.

Performs automated and manual vulnerability assessments using tools like ACAS (Nessus) and SCAP.

Translates findings into action by applying Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs) and resolving compliance gaps.

Serves as the primary bridge between the software development/systems engineering team and the Information System Security Manager (ISSM).

Participates in engineering change boards to ensure modifications do not compromise system posture.

Assists in analyzing security logs, detecting anomalies, and providing system-level technical support during incident response or forensic investigations.

Applies system security engineering principles to implement secure designs, secure configurations, and boundary defenses (firewalls, IDS/IPS, access controls).

Ensures standard security tools (e.g., HBSS/ESS, ACAS, SIEM) are properly integrated.

Requirements

• Minimum of 5 to 9 years of direct experience in cybersecurity engineering, systems engineering, or network administration
• Bachelor's degree in computer science, Information Assurance, System Engineering, or a related technical discipline. Direct experience may substitute for the degree requirements on a case-by-case basis
• Must meet the IASAE Level II baseline qualification requirements

Security+

Security Clearance: Secret