Information Systems Security Engineer

Base-2 Solutions, LLC.; Annapolis (MD); On-site; USD 130,000 - 190,000; Full time

Job summary

Base-2 Solutions in Annapolis, MD seeks an Information Systems Security Engineer to safeguard national defense systems, focusing on RMF, NIST SP 800-53, and IC policies. Lead security design, risk assessments, and RMF documentation.

Role requires hands-on with ACAS/Nessus/Tenable, Splunk, VPNs, PKI, and cloud security across AWS/Azure/GCP. TS/SCI with Full Scope Polygraph is required, CISSP/CAP/CEH/Security+ or AWS Security Specialty preferred.

Qualifications

• Experience with NIST RMF, 800-53 and DoD/IC guidelines.
• Hands-on with security tools: ACAS, Nessus, Tenable, Splunk, Wireshark.
• Experience with Firewalls, IDS/IPS, SIEMs, VPN, PKI, MFA.
• Experience documenting SSPs, POA&Ms, SARs, SCTM.
• Proficiency with Linux/Unix/Windows and virtualization.
• Cloud security across AWS, Azure, Google Cloud.
• Encryption protocols incl. TLS/SSL, IPsec, VPN, PKI.
• Scripting in Python, PowerShell, Bash.
• Familiar with SDLC, secure coding, and software assurance.
• Experience with JIRA, Confluence, ServiceNow.
• Active TS/SCI with Full Scope Polygraph is required.

Responsibilities

• Develops, implements, and maintains security solutions for complex systems.
• Conducts system security analyses, risk assessments, and vulnerability assessments.
• Supports security architecture and artifacts per NIST/DoD/IC policies.
• Collaborates with architects and engineers to embed security in design.
• Maintains SSPs, SARs, and RMF artifacts.
• Ensures compliance with NIST SP 800-53 and related standards.
• Provides security improvement recommendations and handles incidents.
• Engages in security testing, evaluation, and C&A activities.
• Interfaces with government customers to communicate security strategies.

Skills

NIST SP 800-53

RMF

DoD policies

IC policies

System security engineering

Python

PowerShell

Bash

Cloud security

SIEM/IDS/IPS

Education

CISSP

CAP

CEH

Security+

AWS Security Specialty

Tools

ACAS

Nessus

Tenable

Splunk

Wireshark

HBSS

McAfee ePO

Nmap

Metasploit

Burp Suite

Kali Linux

Job description

Position Summary

Base-2 Solutions is seeking a highly skilled and motivated Information Systems Security Engineer (ISSE) to join our team. Our ISSEs play a critical role in safeguarding cutting-edge systems that support national defense and mission-critical operations. We are looking for security professionals who bring expertise in system security design, risk management, and cybersecurity frameworks, as well as strong leadership qualities and an eagerness to tackle complex challenges. Our ideal candidate will demonstrate versatility, attention to detail, and a commitment to protecting sensitive information and systems as we continue to push technology forward.

Essential Duties and Responsibilities

• Develops, implements, and maintains security solutions for complex systems to ensure confidentiality, integrity, and availability.
• Conducts system security analysis, risk assessments, and vulnerability assessments to identify and mitigate risks.
• Supports the development of security architecture and system security engineering artifacts based on NIST, DoD, and IC policies and guidelines.
• Collaborates with system architects, software engineers, and network engineers to incorporate security requirements into system design.
• Develops and maintains System Security Plans (SSPs), Security Assessment Reports (SARs), and related Risk Management Framework (RMF) documentation.
• Performs continuous monitoring and ensures compliance with applicable security standards (NIST SP 800-53, ICD 503, CNSS, etc.).
• Provides recommendations for improving system security posture and addresses security incidents as they arise.
• Engages in security testing, evaluation, and certification & accreditation (C&A) activities.
• Interfaces with government customers and stakeholders to effectively communicate technical information and security strategies.

Required Qualifications

• Experience with security frameworks and standards such as NIST SP 800-53, RMF, ICD 503, CNSS, DoD STIGs.
• Experience with security tools such as ACAS, Nessus, Tenable, Splunk, Wireshark, HBSS, McAfee ePO.
• Experience with security technologies including Firewalls, IDS/IPS, SIEMs, VPNs, PKI, Multi-Factor Authentication.
• Experience with system security documentation: SSPs, POA&Ms, SARs, Security Control Traceability Matrix (SCTM).
• Experience with Linux, Unix, Windows, and Virtualization technologies (VMware, Hyper-V).
• Experience with cloud platforms such as AWS, Azure, Google Cloud with a focus on cloud security.
• Experience with encryption protocols and technologies such as TLS/SSL, IPsec, VPN, PKI.
• Experience with security testing tools: Nmap, Metasploit, Burp Suite, Kali Linux.
• Scripting and automation experience: Python, PowerShell, Bash.
• Knowledge of system development lifecycle (SDLC), software assurance, and secure coding practices.
• Experience with collaboration and issue-tracking tools like JIRA, Confluence, ServiceNow.
• Certifications such as CISSP, CAP, CEH, Security+, AWS Security Specialty, or equivalent.

Preferred Qualifications

• Not specified.

Required Education and Experience Equivalency

• None specified.

Required Certifications

• CISSP
• CAP
• CEH
• Security+
• AWS Security Specialty
• or equivalent

Required Security Clearance

• Active Top Secret/SCI with Full Scope Polygraph

Equal Employment Opportunity

Base-2 Solutions is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy), national origin, age, sexual orientation, gender identity, genetic information, protected veteran status, or any other characteristic protected by law, and will not be discriminated against on the basis of disability. Learn more: base-2solutions.com/eeo