Cyber Security Engineer II: DoD RMF & Secure SDLC Lead

Base-2 Solutions, LLC; Bethesda (MD); On-site; USD 120,000 - 160,000; Full time

Job summary

Base-2 Solutions, LLC in Bethesda, MD is seeking a security-focused engineer to design, develop, and implement secure DoD systems across on-premises infrastructure, aligning with RMF and cross-domain requirements.

The role involves leading RMF activities in the SDLC, developing SSPs/SARs, applying STIGs, and coordinating with DoD guidance to ensure compliant, secure architectures and robust vulnerability management.

Qualifications

• Active TS/SCI with ability to obtain a CI Polygraph.
• Bachelor’s degree with 3+ years of experience (2 additional years may substitute).
• One DoD 8570.01-M IASAE Level II certification (CISSP or equivalent).
• Developer experience in at least one scripting or programming language.
• Experience reviewing vulnerabilities and building mitigation plans.
• Ability to architect and deploy vulnerability scanning solutions (OWASP, Fortify, SonarQube, Tenable).
• Experience with RMF/DoD guidance and related security controls.
• Knowledge of Windows, Linux/UNIX, middleware/web tech, databases, and networks.

Responsibilities

• Support secure architecture, design, and DoD system implementation per DoDI 8510.01 and NIST SP 800-53.
• Lead integration of RMF activities into the SDLC and validate controls.
• Develop and maintain SSPs, SARs, risk assessments, and POA&Ms.
• Apply STIGs and validate compliance using SCAP, STIG Viewer, and ACAS.
• Maintain scanning infrastructure and analyze vulnerabilities for mitigation.
• Support system authorization, incident response, forensics, and security automation.

Education

High School Diploma/GED

Associates Degree

Bachelor's Degree

Masters' Degree

PhD

Tools

XACTA

eMASS

Job description

Base-2 Solutions, LLC in Bethesda, MD is seeking a security-focused engineer to design, develop, and implement secure DoD systems across on-premises infrastructure, aligning with RMF and cross-domain requirements.

The role involves leading RMF activities in the SDLC, developing SSPs/SARs, applying STIGs, and coordinating with DoD guidance to ensure compliant, secure architectures and robust vulnerability management.