Cyber Security Engineer 2

Base-2 Solutions, LLC.; Bethesda, Northern (MD, KY); Hybrid; USD 125,000 - 170,000; Full time

Job summary

Base-2 Solutions, LLC. is seeking a highly skilled cybersecurity professional to design, implement, and secure DoD systems on-prem and through RMF+ processes. The role covers vulnerability management, incident response, and security automation across Windows and Linux environments.

The candidate should hold an active TS/SCI with CI poly, DoD 8570 Level II, and experience with RMF+ tools like XACTA/eMASS, SCAP/ACAS, and CI/CD integrations.

Qualifications

• Active TS/SCI with ability to obtain a CI Polygraph.
• Bachelor's degree with a minimum of three years of experience; two additional years may substitute for the degree.
• At least one DoD 8570.01-M IASAE Level II certification: CISSP, CISSP-ISSAP, CISSP-ISSEP, CSSLP, or CASP+ CE.
• Developer experience preferred in at least one scripting or programming language.
• Experience reviewing cybersecurity vulnerabilities for risk and remediation across systems, networks, apps, and databases.
• Ability to architect, design, troubleshoot, maintain, and deploy vulnerability scanning solutions (OWASP, Fortify, SonarQube, Tenable).
• Experience with RMF+ tools like XACTA, eMASS, or similar.
• Strong understanding of Windows and Linux/UNIX operating systems.
• Experience with middleware/web tech, databases, TCP/IP networking, and CI/CD platforms.
• Familiarity with NIST 800-171/800-172, NIST SSDF, CMMC, CNSSI 1253.
• Experience supporting DoD/IC systems through RMF+.

Responsibilities

• Support the secure architecture, design, and implementation of DoD systems per DoDI 8510.01, NIST SP 800-53, and other DoD guidance.
• Lead integration of RMF activities into the SDLC, including selection, implementation, and validation of security controls.
• Develop and maintain SSPs, SARs, risk assessments, and POA&Ms.
• Apply STIGs and validate compliance using SCAP, STIG Viewer, and ACAS.
• Maintain scanning infrastructure and analyze vulnerabilities for mitigation or risk acceptance.
• Support system authorization, incident response, forensics analysis, and security automation efforts.

Skills

Active TS/SCI with CI Poly

DoD 8570.01-M IASAE Level II

Scripting/Programming

Vulnerability assessment

RMF/SDLC

Vulnerability scanning tools

Windows & Linux/UNIX

CI/CD platforms

NIST 800-171/800-172/NIST SSDF/CMMC

RMF+ process tools (XACTA/eMASS)

Education

Bachelor's degree + 3 years experience

HS Diploma/GED +5y

Associates +5y

Masters +3y

PhD +3y

Tools

OWASP

Fortify

SonarQube

Tenable

SCAP

ACAS

xACTA

eMASS

GitLab

Jira

Confluence

Kubernetes

Active Directory

Job description

Position Summary

Support multiple task orders under the DOMEX Technology Platform contract supporting NMEC by designing, developing, and implementing secure systems in on-premises infrastructure and integrating security across the system lifecycle.

Essential Duties and Responsibilities

• Support the secure architecture, design, and implementation of DoD systems in accordance with DoDI 8510.01, NIST SP 800-53, and other DoD security guidance.
• Lead integration of RMF activities into the SDLC, including selection, implementation, and validation of security controls.
• Develop and maintain SSPs, SARs, risk assessments, and POA&Ms.
• Apply STIGs and validate compliance using SCAP, STIG Viewer, and ACAS.
• Maintain scanning infrastructure and analyze vulnerabilities for mitigation or risk acceptance.
• Support system authorization, incident response, forensics analysis, and security automation efforts.

Required Qualifications

• Active TS/SCI with ability to obtain a CI Polygraph.
• Bachelor's degree with a minimum of three years of experience in the category field. Two additional years of experience may be substituted for the bachelor's degree.
• At least one DoD 8570.01-M IASAE Level II certification: CISSP, CISSP-ISSAP, CISSP-ISSEP, CSSLP, or CASP+ CE.
• Developer experience preferred in at least one scripting or programming language.
• Experience reviewing cybersecurity vulnerabilities for risk and relevance and building mitigation/remediation plans across systems, network, application, and database vulnerabilities.
• Ability to architect, design, troubleshoot, maintain, and deploy vulnerability scanning solutions such as OWASP, Fortify, SonarQube, and Tenable.
• Experience with XACTA, eMASS, or similar tools.
• Strong understanding of Microsoft Windows and Linux/UNIX operating systems.
• Experience with middleware/web technologies, databases, TCP/IP networking, and CI/CD platforms.
• Familiarity with NIST 800-171, 800-172, NIST SSDF, CMMC, and CNSSI 1253.
• Experience supporting DoD/IC systems through the RMF+ process.

Preferred Qualifications

• Software development experience with Python, Java, or React.
• Experience successfully achieving ATO under RMF+.
• Experience with big data applications.
• Experience with GitLab, Jira, and Confluence.
• Experience in Agile environments.
• Experience with OIDC or OAuth2.
• Experience with Kubernetes, Rancher, Strimzi, Cloudera, Active Directory, and scripting languages such as Bash, Python, or PowerShell.

Required Education and Experience Equivalency

• High School Diploma/GED with 5 years of experience.
• Associates Degree with 5 years of experience.
• Bachelors' Degree with 3 years of experience.
• Masters' Degree with 3 years of experience.
• PhD with 3 years of experience.

RequiredCertifications

• One DoD 8570.01-M IASAE Level II certification: CISSP, CISSP-ISSAP, CISSP-ISSEP, CSSLP, or CASP+ CE.

Required Security Clearance

• Active TS/SCI with ability to obtain a CI Polygraph.

Equal Employment Opportunity

Base-2 Solutions is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy), national origin, age, sexual orientation, gender identity, genetic information, protected veteran status, or any other characteristic protected by law, and will not be discriminated against on the basis of disability. Learn more: base-2solutions.com/eeo