Junior Information System Security Engineer (ISSE)

Applied Research Associates, Inc. is an employee-owned research and engineering company providing technical solutions across defense, civil, and health technologies. The Junior Information Systems Security Engineer will support the implementation, testing, documentation, maintenance, and validation of security controls across classified systems while developing cybersecurity engineering experience in vulnerability management, system hardening, monitoring, automation, and RMF compliance.

What you'll do:

• Assist with the implementation, testing, and maintenance of technical security controls for assigned classified information systems
• Support ACAS/Tenable vulnerability and compliance scanning, validate scan coverage and credentials, review findings, and coordinate remediation with system and network administrators
• Apply and validate applicable STIGs, SCAP content, configuration baselines, patches, and approved hardening requirements for Windows, Linux, network, and virtual systems
• Support Microsoft Defender, Windows security settings, Active Directory, Group Policy, BitLocker, certificates, host firewalls, and endpoint logging
• Assist with troubleshooting security-control failures involving endpoints, servers, network devices, authentication services, vulnerability scanners, and monitoring tools
• Collect, organize, and quality-check technical evidence for RMF packages, continuous monitoring, assessments, POA&M validation, and DCSA or customer reviews
• Prepare or support implementation, testing, validation, and rollback plans for approved configuration changes and participate in Configuration Control Board activities
• Use PowerShell, or similar tools to automate recurring technical checks, evidence collection, reporting, and system-administration tasks
• Support incident investigation, log collection, containment, recovery, and post-incident validation as directed
• Coordinate effectively with ISSOs, the assigned ISSM, Security Engineers, System Administrators, and Program Personnel

What they're looking for:

• US Citizen with an active DoD Top Secret clearance
• High School Diploma and equivalent professional experience (at least 6 years) will be considered for talented candidates without a degree or Bachelor's degree in computer science or a related field with 0-2 years of relevant experience
• 2+ years of relevant information technology, systems administration, network administration, cybersecurity, help-desk escalation or military
• Foundational knowledge of Windows or Linux administration and basic networking concepts such as TCP/IP, DNS, DHCP, VLANs, routing, firewalls, and access controls
• Ability to demonstrate knowledge of system hardening, security monitoring, or technical-control validation
• Ability to follow technical procedures, document results, troubleshoot methodically, and communicate issues clearly
• Ability to meet DoD 8570 / 8140 cybersecurity workforce qualification requirements applicable to the assigned work role
• SCI eligibility preferred
• Exposure to one or more of the following: Splunk, Forescout, ACAS/Tenable, Microsoft Defender, Active Directory, Group Policy, RHEL/Linux, virtualization, Cisco networking, STIGs, SCAP, or eMASS
• Experience supporting classified, DoD, DCSA, RMF, or other regulated information-system environments
• Experience with PowerShell, Ansible, or another automation or scripting technology

Benefits:

• Employee ownership
• Health benefits
• Life insurance
• Disability benefits
• Retirement benefits
• Flexible spending
• Rewards and recognition
• Work/life balance
• Professional development
• Relocation assistance