Cyber Security Engineer II — RMF+ DoD Systems

Base-2 Solutions, LLC.; Bethesda, Northern (MD, KY); Hybrid; USD 125.000 - 170.000; Vollzeit

Zusammenfassung

Base-2 Solutions, LLC. is seeking a highly skilled cybersecurity professional to design, implement, and secure DoD systems on-prem and through RMF+ processes. The role covers vulnerability management, incident response, and security automation across Windows and Linux environments.

The candidate should hold an active TS/SCI with CI poly, DoD 8570 Level II, and experience with RMF+ tools like XACTA/eMASS, SCAP/ACAS, and CI/CD integrations.

Qualifikationen

• Active TS/SCI with ability to obtain a CI Polygraph.
• Bachelor's degree with a minimum of three years of experience; two additional years may substitute for the degree.
• At least one DoD 8570.01-M IASAE Level II certification: CISSP, CISSP-ISSAP, CISSP-ISSEP, CSSLP, or CASP+ CE.
• Developer experience preferred in at least one scripting or programming language.
• Experience reviewing cybersecurity vulnerabilities for risk and remediation across systems, networks, apps, and databases.
• Ability to architect, design, troubleshoot, maintain, and deploy vulnerability scanning solutions (OWASP, Fortify, SonarQube, Tenable).
• Experience with RMF+ tools like XACTA, eMASS, or similar.
• Strong understanding of Windows and Linux/UNIX operating systems.
• Experience with middleware/web tech, databases, TCP/IP networking, and CI/CD platforms.
• Familiarity with NIST 800-171/800-172, NIST SSDF, CMMC, CNSSI 1253.
• Experience supporting DoD/IC systems through RMF+.

Aufgaben

• Support the secure architecture, design, and implementation of DoD systems per DoDI 8510.01, NIST SP 800-53, and other DoD guidance.
• Lead integration of RMF activities into the SDLC, including selection, implementation, and validation of security controls.
• Develop and maintain SSPs, SARs, risk assessments, and POA&Ms.
• Apply STIGs and validate compliance using SCAP, STIG Viewer, and ACAS.
• Maintain scanning infrastructure and analyze vulnerabilities for mitigation or risk acceptance.
• Support system authorization, incident response, forensics analysis, and security automation efforts.

Kenntnisse

Active TS/SCI with CI Poly

DoD 8570.01-M IASAE Level II

Scripting/Programming

Vulnerability assessment

RMF/SDLC

Vulnerability scanning tools

Windows & Linux/UNIX

CI/CD platforms

NIST 800-171/800-172/NIST SSDF/CMMC

RMF+ process tools (XACTA/eMASS)

Ausbildung

Bachelor's degree + 3 years experience

HS Diploma/GED +5y

Associates +5y

Masters +3y

PhD +3y

Tools

OWASP

Fortify

SonarQube

Tenable

SCAP

ACAS

xACTA

eMASS

GitLab

Jira

Confluence

Kubernetes

Active Directory

Jobbeschreibung

Base-2 Solutions, LLC. is seeking a highly skilled cybersecurity professional to design, implement, and secure DoD systems on-prem and through RMF+ processes. The role covers vulnerability management, incident response, and security automation across Windows and Linux environments.

The candidate should hold an active TS/SCI with CI poly, DoD 8570 Level II, and experience with RMF+ tools like XACTA/eMASS, SCAP/ACAS, and CI/CD integrations.