Cyber Security Engineer 2

Cybersecurity Jobs; Bethesda (MD); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Competitive salary

100% paid premiums

Annual PTO & holidays

Job summary

Base-2 Solutions supports critical DoD work in Bethesda, MD, focusing on secure system engineering, compliance, and automation for on‑premises environments. This onsite role contributes to mission-focused deployments while integrating security across the full lifecycle.

The ideal candidate holds TS/SCI, DoD 8570 IASAE II, and hands-on experience with RMF, SSPs, and vulnerability management. Strong scripting and Linux/Windows skills are a plus for this role.

Qualifications

• Active TS/SCI with ability to obtain CI Polygraph.
• Bachelor’s degree with at least 3 years of relevant experience.
• One DoD 8570.01-M IASAE Level II certification: CISSP or equivalent.
• Developer experience in at least one scripting or programming language.
• Experience reviewing vulnerabilities and building mitigation plans.
• Experience with vulnerability scanning tools (OWASP, Fortify, SonarQube, Tenable).
• Strong Windows and Linux/UNIX knowledge.
• Familiarity with NIST and DoD security controls.
• Experience supporting RMF+ processes on DoD/IC systems.

Responsibilities

• You will design, develop, and implement secure systems in on‑premises infrastructure.
• Lead RMF activities integration into the SDLC and validate security controls.
• Develop and maintain SSPs, SARs, risk assessments, and POA&Ms.
• Apply STIGs and validate with SCAP, STIG Viewer, and ACAS.
• Maintain scanning infrastructure and support mitigation decisions.
• Support system authorization, incident response, forensics, and security automation.

Skills

Security architecture

RMF integration

Incident response

Vulnerability management

DoD security guidance

Scripting

Windows/Linux

Education

Bachelor’s degree

3 years’ experience

Tools

SCAP

STIG Viewer

ACAS

XACTA

eMASS

CISSP or equivalent

Job description

Base-2 Solutions is supporting critical work under the DOMEX Technology Platform contract for NMEC, bringing together secure system engineering, compliance, and automation. This onsite role in Bethesda, MD helps you contribute to mission-focused deployments in on-premises environments while integrating security across the full lifecycle.

What you’ll do

You will support multiple task orders by designing, developing, and implementing secure systems in on-premises infrastructure. The work includes security architecture, RMF integration, authorization support, and incident response capabilities, along with security automation and vulnerability management.

• Support secure architecture, design, and implementation of DoD systems aligned with DoDI 8510.01, NIST SP 800-53, and other DoD security guidance.
• Lead integration of RMF activities into the SDLC, including selection, implementation, and validation of security controls.
• Develop and maintain SSPs, SARs, risk assessments, and POA&Ms.
• Apply STIGs and validate compliance using SCAP, STIG Viewer, and ACAS.
• Maintain scanning infrastructure, analyze vulnerabilities, and support mitigation or risk acceptance decisions.
• Support activities tied to system authorization, incident response, forensics analysis, and security automation efforts.

What you bring

• Active TS/SCI with ability to obtain a CI Polygraph.
• Bachelor’s degree with at least 3 years of experience in the category field. Two additional years of experience may substitute for the bachelor’s degree.
• At least one DoD 8570.01-M IASAE Level II certification: CISSP, CISSP-ISSAP, CISSP-ISSEP, CSSLP, or CASP+ CE.
• Developer experience preferred in at least one scripting or programming language.
• Experience reviewing cybersecurity vulnerabilities for risk and relevance, and building mitigation or remediation plans across systems, network, application, and database vulnerabilities.
• Ability to architect, design, troubleshoot, maintain, and deploy vulnerability scanning solutions such as OWASP, Fortify, SonarQube, and Tenable.
• Experience with XACTA, eMASS, or similar tools.
• Strong understanding of Microsoft Windows and Linux/UNIX operating systems.
• Experience with middleware/web technologies, databases, TCP/IP networking, and CI/CD platforms.
• Familiarity with NIST 800-171, NIST 800-172, NIST SSDF, CMMC, and CNSSI 1253.
• Experience supporting DoD/IC systems through the RMF+ process.

Preferred fit

• Software development experience with Python, Java, or React.
• Experience successfully achieving ATO under RMF+.
• Experience with big data applications.
• Experience with GitLab, Jira, and Confluence.
• Experience in Agile environments.
• Experience with OIDC or OAuth2.
• Experience with Kubernetes, Rancher, Strimzi, Cloudera, Active Directory, and scripting languages such as Bash, Python, or PowerShell.

Key technologies

Python, Java, React, OWASP, Fortify, SonarQube, Tenable, XACTA, eMASS, SCAP, STIG Viewer, ACAS, CISSP, CISSP-ISSAP, CISSP-ISSEP, CSSLP, CASP+ CE, NIST SP 800-53, DoDI 8510.01, DoD 8570.01-M IASAE, NIST 800-171, NIST 800-172, NIST SSDF, CMMC, CNSSI 1253, RMF, SDLC, RMF+, TCP/IP, CI/CD, Kubernetes, Rancher, Strimzi, Cloudera, Active Directory, Bash, PowerShell, GitLab, Jira, Confluence, OIDC, OAuth2.

Benefits

• Competitive fixed salary or hourly pay (based on experience, skills, location, and internal equity).
• Employee referral bonuses up to $10,000 per hired referral.
• Additional bonus opportunities for exceptional performance and contributions to business development and company growth (role-dependent).
• 100% company-paid medical premiums for employees and eligible dependents.
• Choose from multiple plan options with CareFirst, Kaiser, and UnitedHealthcare, including PPO, POS, HMO, and HSA-compatible plans.
• 100% company-paid dental premiums for employees and eligible dependents.
• 100% company-paid vision premiums for employees and eligible dependents.
• 100% company-paid premiums for short-term disability, long-term disability, AD&D, and life insurance up to $200,000.
• 401(k) with immediate vesting: 4% company match plus 4% non-elective company contribution (8% total).
• 401(k) pre-tax and Roth options.
• Up to 20 days of flexible paid time off (PTO).
• 11 paid floating holidays.
• Flexible work schedules, including flex time and compressed work periods (contract and project-dependent).