Cyber Security Engineer IV – DoD RMF & SDLC Expert

Base-2 Solutions, LLC; Bethesda (MD); On-site; USD 140,000 - 180,000; Full time

Job summary

Base-2 Solutions, LLC is seeking an experienced cybersecurity engineer to support the DoD RMF process and secure DoD/IC systems. You will design, implement, and assess secure architectures for on‑premises infrastructure, guiding risk management across the system lifecycle.

The role requires active TS/SCI clearance, advanced certifications, and hands‑on experience with vulnerability management tools, RMF, and secure software development practices.

Qualifications

• Active TS/SCI with ability to obtain a CI Polygraph.
• Bachelor’s degree with 10+ years in the field.
• DoD 8570.01-M IASAE Level II certification: CISSP, CISSP-ISSAP, CISSP-ISSEP, CSSLP, or CASP CE.
• Developer experience in at least one scripting or programming language.
• Experience reviewing vulnerabilities and creating mitigation plans across systems.
• Ability to architect and deploy vulnerability scanning tools (OWASP, Fortify, SonarQube, Tenable).
• Experience with XACTA, eMASS, or similar tools.
• Strong Windows and Linux/UNIX knowledge.
• Experience with middleware/web tech, databases, TCP/IP, and CI/CD.
• Familiarity with NIST 800-171/800-172, NIST SSDF, CMMC, CNSSI 1253.
• Experience supporting DoD/IC systems through RMF.

Responsibilities

• Support secure architecture, design, and DoD system implementation per DoDI 8510.01 and NIST SP 800-53.
• Lead RMF activities within the SDLC, select and validate security controls.
• Develop and maintain SSPs, SARs, risk assessments, and POA&Ms.
• Apply STIGs and validate compliance using SCAP, STIG Viewer, ACAS.
• Maintain scanning infrastructure and analyze vulnerabilities for remediation.
• Support system authorization, incident response, and forensics efforts.

Skills

Scripting

Python

Java

React

CI/CD

Vulnerability assessment

RMF

DoD security

Education

Bachelor's degree

Master's degree (equivalency)

PhD (equivalency)

Tools

OWASP

Fortify

SonarQube

Tenable

XACTA

eMASS

SCAP

GitLab

Jira

Confluence

Kubernetes

Job description

Base-2 Solutions, LLC is seeking an experienced cybersecurity engineer to support the DoD RMF process and secure DoD/IC systems. You will design, implement, and assess secure architectures for on‑premises infrastructure, guiding risk management across the system lifecycle.

The role requires active TS/SCI clearance, advanced certifications, and hands‑on experience with vulnerability management tools, RMF, and secure software development practices.