Information System Security Engineer (ISSE) - Risk Management Framework (RMF), AWS, ACAS, Splunk

Applied Research Associates, Inc. (ARA) is looking for a bright, motivated, and energetic individual who embraces our core values of Passion, Freedom, Service, and Growth! As an Information System Security Engineer, you will participate in a dynamic team to develop, test, and validate Department of Defense (DoD) Risk Management Framework (RMF) security controls across cloud environments. You will also be offered learning opportunities that will help you grow your technical and professional skills and allow you to pursue the work you are passionate about.What you’ll do as an Information System Security Engineer:Work alongside system administrators, software developers, and customers to identify and remediate cybersecurity vulnerabilitiesDeploy and manage security tools via Infrastructure as Code (IaC) and Configuration as Code (CaC) such as Assured Compliance Assessment Solution (ACAS), Splunk, Microsoft Defender, and Clam AV to monitor system health, assess security compliance, and investigate findingsApply Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIG), security best practices, and configuration management processes to harden systems and maintain compliance with DoD cybersecurity requirementsInformation System Security Engineer Requirements:US citizenship (Selected applicants will undergo a security investigation and must meet eligibility requirements at the time of employment)BS or higher in Cybersecurity, Computer Science, Information Technology, Engineering, Applied Mathematics, or a closely related fieldActive AWS Certification5-7 years of relevant work experience with a bachelor’s degree, or 3-5 years of relevant work experience with a master’s degreeExcellent communication, documentation, and collaboration skillsAbility to work onsite 3 days per week in Raleigh, NCInformation System Security Engineer Preferences:2+ years of hands-on experience implementing IaC and CaC3+ years of hands-on experience administering Windows and Linux systemsAWS Solutions Architect or Security Specialty CertificationCompTIA Security + CertificationActive DoD Secret Clearance (At the time of hire)Experience supporting or implementing the DoD RMFExperience with ACAS and other vulnerability scannersExperience using security monitoring and endpoint protection tools such as Splunk, Microsoft Defender, and Clam AVExperience applying DISA STIGs and Security Requirement Guides (SRGs)Experience identifying, prioritizing, and remediating operating system, application, and infrastructure vulnerabilitiesFamiliarity with continuous monitoring, vulnerability management, and security compliance processesWho is ARA?Do you want to work for a purpose? Applied Research Associates, Inc. (aka ARA) is an employee-owned international research and engineering company. We have been providing technically superior solutions to complex and challenging problems in the physical sciences since 1979. ARA has over 2,200 employee-owners and continues to grow rapidly. Together, our offices throughout the U.S. and Canada provide a broad range of technical expertise in defense, civil, and health technologies, computer software and simulation, systems analysis, environmental technologies, and testing and measurement. ARA also prides itself, on having a challenging culture where innovation & experimentation are the norm. The motto, “Engineering and Science for Fun and Profit” sums up the ARA experience. Employee ownership ensures you have a voice in what happens in the company. We are also very proud of our Women’s Initiative Network (WIN), whose purpose is to motivate, support, and encourage professional career development for women to maximize career and professional accomplishments. To find out more about what the Software Enterprise Division has to offer, visit our website at: QualificationsEDUCATIONBachelors or better in Cybersecurity or related fieldEXPERIENCE5 - 7 years: Relevant Work Experience LICENSES & CERTIFICATIONSComp TIA Security+AWS Certified SecurityJob SummaryRequisition Number: INFOR010054Job Category: Systems DevelopmentSchedule: Full-Time