Information System Security Specialist II

We are seeking a dedicated and detail-oriented Information System Security Specialist II to join our team. In this role, you will support software and hardware patch management, vulnerability scanning, and the quarterly maintenance of software baselines to ensure IA compliance. The ideal candidate will play a key role in maintaining the security, integrity, and compliance of enterprise systems while supporting ongoing cybersecurity and operational objectives.

Key responsibilities

• Maintain a record of patches applied and assist in updating corresponding documentation with a list of software versions.
• Perform Cybersecurity Compliance Tests as required.
• Distribute vulnerability packages via Secret Internet Protocol Router Network (SIPRNET) to the cognizant Information Systems Security Officer (ISSO) at the completion of the Compliance Test review.
• Perform and create documentation for an updated or new ATO.
• Review and communicate POA&M information with subcontractor to identify what vulnerabilities can be mitigated
• Work with integration and testing teams to identify issues with software to then communicate those deficiencies with the OEM of the software.
• Attend meetings with customer and OEM to outline, discuss, and find resolution to vulnerabilities.
• Engage with OEM on status of updates related to fixes and releases.
• Perform and review STIGs, and SRGs.
• Some Travel Occasionally up to 10%.

• Experience working in Cybersecurity/Information Security.
• Experience as a Systems Administrator or equivalent.
• Exposure and experience working with ACAS, STIGs, and POA&Ms.
• Detail oriented, able to keep track of key information, documentation, and communicate issues forward.
• Capable of communicating with various stakeholders, customers, and team members effectively.
• Must be a US Citizen.
• Ability to obtain and maintain a Secret Clearance.
• Bachelor's in Information Technology.
• Must have or be able to obtain CompTIA Security Plus certification prior to starting.

About TRISTAR

TRISTAR is an SBA certified Service-Disabled Veteran-Owned professional services company supporting the U.S. Department of War programs. Our core competencies include Electronic Warfare, Enterprise Management, Full Spectrum Cybersecurity, Information Technology, Digital Transformation, Software Engineering and Development, Maritime Modernization and Engineering, and Technical Solutions.

TRISTAR was founded in March 1995 and has built an employee-focused collaborative environment which enables our team of professionals to create and deliver customized solutions to meet our customers' mission critical challenges. TRISTAR's core capabilities support customers with end-to-end solutions.

For over 30 years, TRISTAR has demonstrated and perfected our ability to successfully manage any task, small or large no matter how difficult or complex.

TRISTAR is proud to serve the Department of War and other Federal Agencies.

TRISTAR provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.