Junior Information System Security Engineer (ISSE)

Applied Research Associates (ARA), Inc.

is seeking a Junior Information Systems Security Engineer (ISSE) in Raleigh, NC to support the implementation, testing, documentation, and maintenance of technical security controls across classified Windows, Linux, network, and security-platform environments.

Working with senior cybersecurity personnel, the ISSE will gain hands-on experience with Splunk, ACAS/Tenable, Microsoft Defender, STIG/SCAP compliance, vulnerability remediation, automation, and RMF evidence while supporting secure and inspection-ready mission operations.

This position is intended for a technical professional who has strong information technology fundamentals and wants to grow in cybersecurity engineering.

The ISSE will receive guidance from senior personnel while developing hands-on experience with security engineering, vulnerability management, system hardening, monitoring, and RMF evidence.

Junior Information System Security Engineer Primary Responsibilities:


* Assist with the implementation, testing, and maintenance of technical security controls for assigned classified information systems.


* Support ACAS/Tenable vulnerability and compliance scanning, validate scan coverage and credentials, review findings, and coordinate remediation with system and network administrators.


* Apply and validate applicable STIGs, SCAP content, configuration baselines, patches, and approved hardening requirements for Windows, Linux, network, and virtual systems.


* Support Microsoft Defender, Windows security settings, Active Directory, Group Policy, BitLocker, certificates, host firewalls, and endpoint logging.


* Assist with troubleshooting security-control failures involving endpoints, servers, network devices, authentication services, vulnerability scanners, and monitoring tools.


* Collect, organize, and quality-check technical evidence for RMF packages, continuous monitoring, assessments, POA&M validation, and DCSA or customer reviews.


* Prepare or support implementation, testing, validation, and rollback plans for approved configuration changes and participate in Configuration Control Board activities.


* Use PowerShell, or similar tools to automate recurring technical checks, evidence collection, reporting, and system-administration tasks.


* Support incident investigation, log collection, containment, recovery, and post-incident validation as directed.


* Coordinate effectively with ISSOs, the assigned ISSM, Security Engineers, System Administrators, and Program Personnel.

Junior Information System Security Engineer Qualifications:


* US Citizen with an active DoD Top Secret clearance; SCI eligibility preferred


* High School Diploma and equivalent professional experience (at least 6 years) will be considered for talented candidates without a degree or Bachelor’s degree in computer science or a related field with 0-2 years of relevant experience.


* 2+ years of relevant informa...