Cyber Security Engineer III — RMF & Secure SDLC Lead

Base-2 Solutions, LLC; Bethesda (MD); On-site; USD 110,000 - 150,000; Full time

Job summary

Base-2 Solutions, LLC in Bethesda, MD is seeking a security-focused Systems Engineer to design, develop, and implement secure DoD-grade systems across on-premises infrastructure. The role supports the DOMEX Technology Platform contract for NMEC, advancing RMF integration into the SDLC and ensuring compliance with NIST SP 800-53 and DoDI 8510.01.

You will work with CM, develop SSPs, SARs, risk assessments, and POA&Ms; apply STIGs, maintain scanning tooling, and support incident response and

Qualifications

• Active TS/SCI clearance with ability to obtain CI Polygraph.
• Bachelor’s degree with six years of DoD/related field experience; three additional years may substitute.
• DoD 8570.01-M IASAE Level II certification: CISSP, CISSP-ISSAP, CISSP-ISSEP, CSSLP, or CASP CE.
• Developer experience in at least one scripting or programming language.
• Experience reviewing cybersecurity vulnerabilities for risk and remediation planning.
• Ability to architect, design, troubleshoot, and deploy vulnerability scanning solutions (OWASP, Fortify, SonarQube, Tenable).
• Experience with XACTA, eMASS, or similar tools.
• Strong understanding of Windows and Linux/UNIX operating systems.
• Experience with middleware/web technologies, databases, TCP/IP networking, and CI/CD platforms.
• Familiarity with NIST 800-171, 800-172, NIST SSDF, CMMC, CNSSI 1253.
• Experience supporting DoD/IC systems through the RMF process.

Responsibilities

• Support the secure architecture, design, and implementation of DoD systems in accordance with DoD guidance.
• Lead integration of RMF activities into the SDLC, including selection, implementation, and validation of security controls.
• Develop and maintain SSPs, SARs, risk assessments, and POA&Ms.
• Apply STIGs and validate compliance using SCAP, STIG Viewer, and ACAS.
• Maintain scanning infrastructure and analyze vulnerabilities for mitigation or risk acceptance.
• Support system authorization, incident response, forensics analysis, and security automation efforts.

Skills

RMF integration

Vulnerability scanning

DoD security guidance

Windows & Linux

CI/CD knowledge

Scripting languages

Threat assessment

Education

High School Diploma/GED with 9 years

Associates Degree with 9 years

Bachelor's Degree with 6 years

Masters’ Degree with 6 years

PhD with 6 years

Tools

XACTA

eMASS

SCAP

STIG Viewer

ACAS

OWASP

Tenable

Fortify

Jira

GitLab

Job description

Base-2 Solutions, LLC in Bethesda, MD is seeking a security-focused Systems Engineer to design, develop, and implement secure DoD-grade systems across on-premises infrastructure. The role supports the DOMEX Technology Platform contract for NMEC, advancing RMF integration into the SDLC and ensuring compliance with NIST SP 800-53 and DoDI 8510.01.

You will work with CM, develop SSPs, SARs, risk assessments, and POA&Ms; apply STIGs, maintain scanning tooling, and support incident response and