Job description

Applied Research Associates (ARA), Inc. is seeking a Junior Information Systems Security Engineer (ISSE) in Raleigh, NC to support the implementation, testing, documentation, and maintenance of technical security controls across classified Windows, Linux, network, and security-platform environments. Working with senior cybersecurity personnel, the ISSE will gain hands-on experience with Splunk, ACAS/Tenable, Microsoft Defender, STIG/SCAP compliance, vulnerability remediation, automation, and RMF evidence while supporting secure and inspection-ready mission operations. This position is intended for a technical professional who has strong information technology fundamentals and wants to grow in cybersecurity engineering. The ISSE will receive guidance from senior personnel while developing hands-on experience with security engineering, vulnerability management, system hardening, monitoring, and RMF evidence. Junior Information System Security Engineer Primary Responsibilities: • Assist with the implementation, testing, and maintenance of technical security controls for assigned classified information systems. • Support ACAS/Tenable vulnerability and compliance scanning, validate scan coverage and credentials, review findings, and coordinate remediation with system and network administrators. • Apply and validate applicable STIGs, SCAP content, configuration baselines, patches, and approved hardening requirements for Windows, Linux, network, and virtual systems. • Support Microsoft Defender, Windows security settings, Active Directory, Group Policy, BitLocker, certificates, host firewalls, and endpoint logging. • Assist with troubleshooting security-control failures involving endpoints, servers, network devices, authentication services, vulnerability scanners, and monitoring tools. • Collect, organize, and quality-check technical evidence for RMF packages, continuous monitoring, assessments, POA&M validation, and DCSA or customer reviews. • Prepare or support implementation, testing, validation, and rollback plans for approved configuration changes and participate in Configuration Control Board activities. • Use PowerShell, or similar tools to automate recurring technical checks, evidence collection, reporting, and system-administration tasks. • Support incident investigation, log collection, containment, recovery, and post-incident validation as directed. • Coordinate effectively with ISSOs, the assigned ISSM, Security Engineers, System Administrators, and Program Personnel. Junior Information System Security Engineer Qualifications: • US Citizen with an active DoD Top Secret clearance; SCI eligibility preferred • High School Diploma and equivalent professional experience (at least 6 years) will be considered for talented candidates without a degree or Bachelor’s degree in computer science or a related field with 0-2 years of relevant experience. • 2+ years of relevant information technology, systems administration, network administration, cybersecurity, help-desk escalation or military. • Foundational knowledge of Windows or Linux administration and basic networking concepts such as TCP/IP, DNS, DHCP, VLANs, routing, firewalls, and access controls. • Ability to demonstrate knowledge of system hardening, security monitoring, or technical-control validation. • Ability to follow technical procedures, document results, troubleshoot methodically, and communicate issues clearly. • Ability to meet DoD 8570 / 8140 cybersecurity workforce qualification requirements applicable to the assigned work role. Junior Information System Security Engineer Preferences: • Exposure to one or more of the following: Splunk, Forescout, ACAS/Tenable, Microsoft Defender, Active Directory, Group Policy, RHEL/Linux, virtualization, Cisco networking, STIGs, SCAP, or eMASS. • Experience supporting classified, DoD, DCSA, RMF, or other regulated information-system environments. • Experience with PowerShell, Ansible, or another automation or scripting technology. Who is ARA? Do you want to work for a purpose? Applied Research Associates, Inc. (aka ARA) is an employee-owned international research and engineering company. We have been providing technically superior solutions to complex and challenging problems in the physical sciences since 1979. ARA has over 2,279 employee owners and continues to grow rapidly. Together, our offices throughout the U.S. and Canada provide a broad range of technical expertise in defense, civil, and health technologies, computer software and simulation, systems analysis, environmental technologies, and testing and measurement. ARA also prides itself, on having a challenging culture where innovation & experimentation are the norm. The motto, “Engineering and Science for Fun and Profit” sums up the ARA experience. Employee ownership ensures you have a voice with what happens in the company. To find out more about what the Integrated Mission Systems Sector has to offer, visit our website at ara.com To learn more about our generous benefits program including health, life & disability, retirement, flexible spending, rewards & recognition, work/life balance, professional development and relocation visit ara.com

Requirements

Must-haves

Junior Information System Security Engineer Primary Responsibilities:
Assist with the implementation, testing, and maintenance of technical security controls for assigned classified information systems.
Support ACAS/Tenable vulnerability and compliance scanning, validate scan coverage and credentials, review findings, and coordinate remediation with system and network administrators.
Apply and validate applicable STIGs, SCAP content, configuration baselines, patches, and approved hardening requirements for Windows, Linux, network, and virtual systems.
Support Microsoft Defender, Windows security settings, Active Directory, Group Policy, BitLocker, certificates, host firewalls, and endpoint logging.
Assist with troubleshooting security-control failures involving endpoints, servers, network devices, authentication services, vulnerability scanners, and monitoring tools.
Collect, organize, and quality-check technical evidence for RMF packages, continuous monitoring, assessments, POA&M validation, and DCSA or customer reviews.
Prepare or support implementation, testing, validation, and rollback plans for approved configuration changes and participate in Configuration Control Board activities.
Use PowerShell, or similar tools to automate recurring technical checks, evidence collection, reporting, and system-administration tasks.
Support incident investigation, log collection, containment, recovery, and post-incident validation as directed.
Coordinate effectively with ISSOs, the assigned ISSM, Security Engineers, System Administrators, and Program Personnel.
Junior Information System Security Engineer Qualifications:
2+ years of relevant information technology, systems administration, network administration, cybersecurity, help-desk escalation or military.
Foundational knowledge of Windows or Linux administration and basic networking concepts such as TCP/IP, DNS, DHCP, VLANs, routing, firewalls, and access controls.
Ability to demonstrate knowledge of system hardening, security monitoring, or technical-control validation.
Ability to follow technical procedures, document results, troubleshoot methodically, and communicate issues clearly.
Ability to meet DoD 8570 / 8140 cybersecurity workforce qualification requirements applicable to the assigned work role.
Junior Information System Security Engineer Preferences:
Exposure to one or more of the following: Splunk, Forescout, ACAS/Tenable, Microsoft Defender, Active Directory, Group Policy, RHEL/Linux, virtualization, Cisco networking, STIGs, SCAP, or eMASS.
Experience supporting classified, DoD, DCSA, RMF, or other regulated information-system environments.
Experience with PowerShell, Ansible, or another automation or scripting technology.
To find out more about what the Integrated Mission Systems Sector has to offer, visit our website at https://www.ara.com/raleigh/

Nice-to-haves

US Citizen with an active DoD Top Secret clearance; SCI eligibility preferred

Application prep

Use the role’s language and application details while tailoring your materials.

Platform: ukg
Effort: medium

Benefits

Benefits detected in the listing.

Professional Development