Cyber Security Engineer 3

Base-2 Solutions, LLC; Bethesda (MD); On-site; USD 110,000 - 150,000; Full time

Job summary

Base-2 Solutions, LLC in Bethesda, MD is seeking a security-focused Systems Engineer to design, develop, and implement secure DoD-grade systems across on-premises infrastructure. The role supports the DOMEX Technology Platform contract for NMEC, advancing RMF integration into the SDLC and ensuring compliance with NIST SP 800-53 and DoDI 8510.01.

You will work with CM, develop SSPs, SARs, risk assessments, and POA&Ms; apply STIGs, maintain scanning tooling, and support incident response and

Qualifications

• Active TS/SCI clearance with ability to obtain CI Polygraph.
• Bachelor’s degree with six years of DoD/related field experience; three additional years may substitute.
• DoD 8570.01-M IASAE Level II certification: CISSP, CISSP-ISSAP, CISSP-ISSEP, CSSLP, or CASP CE.
• Developer experience in at least one scripting or programming language.
• Experience reviewing cybersecurity vulnerabilities for risk and remediation planning.
• Ability to architect, design, troubleshoot, and deploy vulnerability scanning solutions (OWASP, Fortify, SonarQube, Tenable).
• Experience with XACTA, eMASS, or similar tools.
• Strong understanding of Windows and Linux/UNIX operating systems.
• Experience with middleware/web technologies, databases, TCP/IP networking, and CI/CD platforms.
• Familiarity with NIST 800-171, 800-172, NIST SSDF, CMMC, CNSSI 1253.
• Experience supporting DoD/IC systems through the RMF process.

Responsibilities

• Support the secure architecture, design, and implementation of DoD systems in accordance with DoD guidance.
• Lead integration of RMF activities into the SDLC, including selection, implementation, and validation of security controls.
• Develop and maintain SSPs, SARs, risk assessments, and POA&Ms.
• Apply STIGs and validate compliance using SCAP, STIG Viewer, and ACAS.
• Maintain scanning infrastructure and analyze vulnerabilities for mitigation or risk acceptance.
• Support system authorization, incident response, forensics analysis, and security automation efforts.

Skills

RMF integration

Vulnerability scanning

DoD security guidance

Windows & Linux

CI/CD knowledge

Scripting languages

Threat assessment

Education

High School Diploma/GED with 9 years

Associates Degree with 9 years

Bachelor's Degree with 6 years

Masters’ Degree with 6 years

PhD with 6 years

Tools

XACTA

eMASS

SCAP

STIG Viewer

ACAS

OWASP

Tenable

Fortify

Jira

GitLab

Job description

Position Summary

Support multiple task orders under the DOMEX Technology Platform contract supporting NMEC by designing, developing, and implementing secure systems in on-premises infrastructure and integrating security across the system lifecycle.

Essential Duties and Responsibilities

• Support the secure architecture, design, and implementation of DoD systems in accordance with DoDI 8510.01, NIST SP 800-53, and other DoD security guidance.
• Lead integration of RMF activities into the SDLC, including selection, implementation, and validation of security controls.
• Develop and maintain SSPs, SARs, risk assessments, and POA&Ms.
• Apply STIGs and validate compliance using SCAP, STIG Viewer, and ACAS.
• Maintain scanning infrastructure and analyze vulnerabilities for mitigation or risk acceptance.
• Support system authorization, incident response, forensics analysis, and security automation efforts.

Required Qualifications

• Active TS/SCI with ability to obtain a CI Polygraph.
• Bachelor’s degree with a minimum of six years of experience in the category field. Three additional years of experience may be substituted for the bachelor’s degree.
• At least one DoD 8570.01-M IASAE Level II certification: CISSP, CISSP-ISSAP, CISSP-ISSEP, CSSLP, or CASP CE.
• Developer experience preferred in at least one scripting or programming language.
• Experience reviewing cybersecurity vulnerabilities for risk and relevance and building mitigation/remediation plans across systems, network, application, and database vulnerabilities.
• Ability to architect, design, troubleshoot, maintain, and deploy vulnerability scanning solutions such as OWASP, Fortify, SonarQube, and Tenable.
• Experience with XACTA, eMASS, or similar tools.
• Strong understanding of Microsoft Windows and Linux/UNIX operating systems.
• Experience with middleware/web technologies, databases, TCP/IP networking, and CI/CD platforms.
• Familiarity with NIST 800-171, 800-172, NIST SSDF, CMMC, and CNSSI 1253.
• Experience supporting DoD/IC systems through the RMF process.

Preferred Qualifications

• Software development experience with Python, Java, or React.
• Experience successfully achieving ATO under RMF .
• Experience with big data applications.
• Experience with GitLab, Jira, and Confluence.
• Experience in Agile environments.
• Experience with OIDC or OAuth2.
• Experience with Kubernetes, Rancher, Strimzi, Cloudera, Active Directory, and scripting languages such as Bash, Python, or PowerShell.

Required Education and Experience Equivalency

• High School Diploma/GED with 9 years of experience.
• Associates Degree with 9 years of experience.
• Bachelors’ Degree with 6 years of experience.
• Masters’ Degree with 6 years of experience.
• PhD with 6 years of experience.

Required Certifications

• One DoD 8570.01-M IASAE Level II certification: CISSP, CISSP-ISSAP, CISSP-ISSEP, CSSLP, or CASP CE.

Required Security Clearance

• Active TS/SCI with ability to obtain a CI Polygraph.