Cybersecurity Engineer 3

Base-2 Solutions; Reston (VA); On-site; USD 150,000 - 190,000; Full time

Benefits offered by this job

Salary & bonuses

Company-paid benefits

401(k) retirement plan

Paid time off

Referral bonuses

Job summary

Base-2 Solutions is seeking a Cyber Security Engineer to join the Reston, VA team. The role focuses on designing, implementing, and maintaining cybersecurity infrastructure to safeguard sensitive information and assets.

The engineer will contribute to security architecture, incident response, and regulatory compliance. Ideal candidates have 7+ years of experience in cybersecurity engineering, strong log analysis skills (Splunk), and hands-on experience with NIST RMF, FedRAMP, and cloud/DevSecOps

Qualifications

• Active Top Secret/SCI with CI Polygraph.
• 7+ years of experience as a cybersecurity engineer with a specialization in designing and building implementations of required security controls.
• Experience implementing continuous monitoring and auditing of solutions for compliance with security controls.
• Strong skills in specifying and implementing log collection into tools such as Splunk.
• Experience querying and analyzing aggregated logs to identify security-relevant anomalies or risks.
• Strong experience implementing security controls from government regulatory frameworks and security standards, including NIST SP 800-53, RMF, ICD 503, FISMA, and FedRAMP.
• Experience implementing controls for cloud, container, and DevSecOps services and solutions within IL5 to IL6+ environments.
• Strong understanding of network protocols, operating systems, and infrastructure components.
• Proficiency in incident response, security incident handling, and forensic analysis techniques.
• Experience with security tools such as Fortify, Acunetix, and Prisma Cloud.
• CISSP or equivalent certification to support DoD 8140 requirements.

Responsibilities

• Design, implement, and manage security solutions, including firewalls, intrusion detection/prevention systems, endpoint protection, and encryption mechanisms.
• Conduct regular security assessments to identify vulnerabilities and weaknesses in systems, networks, and applications.
• Develop and implement incident response plans to effectively address security incidents and breaches.
• Collaborate with cross-functional teams to establish and enforce security policies, standards, and procedures.
• Monitor network traffic, system logs, and security alerts to detect and respond to potential security incidents.
• Analyze and investigate anomalies and security breaches, taking appropriate actions to mitigate risks.
• Work closely with IT, software development, compliance, and other cross-functional teams to integrate security into all phases of the development lifecycle.
• Maintain thorough and accurate documentation of security processes, procedures, and configurations.
• Prepare detailed reports on security findings, incidents, and actions taken.

Skills

Incident response

Forensic analysis

Security monitoring

Log analysis

Security controls design

Security tooling (Splunk)

Security incident handling

Communication with stakeholders

Cloud/DevSecOps security

Network protocols knowledge

Education

Bachelor's Degree

Master's Degree

PhD

Tools

Fortify

Acunetix

Prisma Cloud

Job description

• Required Security Clearance: Top Secret/SCI with CI Polygraph
• Location: Reston, VA
• Work Type: On-Site
• Shift: First

• Requisition ID: 5002
• Standard Title: Cyber Security Engineer
• Required Security Clearance: Top Secret/SCI with CI Polygraph
• Location: Reston, VA
• Work Type: On-Site
• Shift: First
• Referral Eligibility: Eligible
• U.S. Citizenship Required? Yes

Position Summary

We are seeking a skilled and motivated Cybersecurity Engineer 3 to join our dynamic team and play a pivotal role in safeguarding digital assets and sensitive information. The ideal candidate is a dedicated cybersecurity professional with a strong understanding of current threats and vulnerabilities and the ability to implement robust security measures. The Cybersecurity Engineer 3 will contribute to the design, implementation, and maintenance of cybersecurity infrastructure while staying current on emerging trends, regulatory frameworks, and security best practices.

Essential Duties And Responsibilities

• Design, implement, and manage security solutions, including firewalls, intrusion detection/prevention systems, endpoint protection, and encryption mechanisms.
• Conduct regular security assessments to identify vulnerabilities and weaknesses in systems, networks, and applications.
• Develop and implement incident response plans to effectively address security incidents and breaches.
• Collaborate with cross-functional teams to establish and enforce security policies, standards, and procedures.
• Monitor network traffic, system logs, and security alerts to detect and respond to potential security incidents.
• Analyze and investigate anomalies and security breaches, taking appropriate actions to mitigate risks.
• Work closely with IT, software development, compliance, and other cross-functional teams to integrate security into all phases of the development lifecycle.
• Maintain thorough and accurate documentation of security processes, procedures, and configurations.
• Prepare detailed reports on security findings, incidents, and actions taken.

Required Qualifications

• Active Top Secret/SCI with CI Polygraph.
• 7+ years of experience as a cybersecurity engineer with a specialization in designing and building implementations of required security controls.
• Experience implementing continuous monitoring and auditing of solutions for compliance with security controls.
• Strong skills in specifying and implementing log collection into tools such as Splunk.
• Experience querying and analyzing aggregated logs to identify security-relevant anomalies or risks.
• Strong experience implementing security controls from government regulatory frameworks and security standards, including NIST SP 800-53, RMF, ICD 503, FISMA, and FedRAMP.
• Experience implementing controls for cloud, container, and DevSecOps services and solutions within IL5 to IL6+ environments.
• Strong understanding of network protocols, operating systems, and infrastructure components.
• Proficiency in incident response, security incident handling, and forensic analysis techniques.
• Experience with security tools such as Fortify, Acunetix, and Prisma Cloud.
• Effective communication skills, with the ability to convey complex technical concepts to both technical and non-technical stakeholders.
• CISSP or equivalent certification to support DoD 8140 requirements.

Preferred Qualifications

• Not specified.

Required Education and Experience Equivalency

• High School Diploma/GED: N/A
• Associate Degree: N/A
• Bachelor's Degree: 7 years of experience.
• Master's Degree: 7 years of experience.
• PhD: 7 years of experience.

Required Certifications

• CISSP or equivalent certification to support DoD 8140 requirements.

Required Security Clearance

• Active Top Secret/SCI with CI Polygraph.

Pay & Benefit Highlights

Compensation

• Competitive fixed salary or hourly pay (based on experience, skills, location, and internal equity).
• Employee referral bonuses up to $10,000 per hired referral.
• Additional bonus opportunities for exceptional performance and contributions to business development and company growth (role-dependent).

Health

• 100% company-paid medical premiums for employees and eligible dependents.
• Choose from multiple plan options with CareFirst, Kaiser, and UnitedHealthcare, including PPO, POS, HMO, and HSA-compatible plans.
• 100% company-paid dental premiums for employees and eligible dependents.
• 100% company-paid vision premiums for employees and eligible dependents.

Income Protection

• 100% company-paid premiums for short-term disability.
• 100% company-paid premiums for long-term disability.
• 100% company-paid premiums for accidental death & dismemberment (AD&D).
• 100% company-paid premiums for life insurance up to $200,000.

Retirement

• 401(k) with immediate vesting: 4% company match plus a 4% non-elective company contribution (8% total).
• 401(k) pre-tax and Roth options.

Leave

• Up to 20 days of flexible paid time off (PTO).
• 11 paid floating holidays.

Work-Life Balance

• Flexible work schedules, including flex time and compressed work periods (contract and project-dependent).