Information Systems Security Engineer

Base-2 Solutions; Maryland; On-site; USD 110,000 - 140,000; Full time

Benefits offered by this job

Healthcare benefits

401(k) with company match

Paid time off

Referral bonuses up to $10,000

Job summary

Base-2 Solutions is seeking an Information Systems Security Engineer (ISSE) to safeguard national defense systems. You will design security, perform RMF processes, and lead risk assessments. The role requires TS/SCI with Full Scope Poly and hands-on work on security architectures, testing, and documentation.

You will collaborate with government customers and cross-functional teams. We offer competitive pay and comprehensive benefits including health, retirement, and PTO, with on-site work in

Qualifications

• Experience with NIST SP 800-53, RMF, ICD 503, CNSS, DoD STIGs.
• Experience with security tools and technologies including the ones listed in qualifications.
• Experience with Linux, Unix, Windows, and virtualization (VMware, Hyper-V).
• Experience with cloud platforms such as AWS, Azure, Google Cloud with a focus on cloud security.
• Scripting knowledge: Python, PowerShell, Bash.
• Knowledge of SDLC, software assurance, and secure coding practices.
• Experience with JIRA, Confluence, ServiceNow.

Responsibilities

• Develops, implements, and maintains security solutions for complex systems to ensure confidentiality, integrity, and availability.
• Conducts system security analysis, risk assessments, and vulnerability assessments to identify and mitigate risks.
• Supports the development of security architecture and system security engineering artifacts based on NIST, DoD, and IC policies and guidelines.
• Collaborates with system architects, software engineers, and network engineers to incorporate security requirements into system design.
• Develops and maintains System Security Plans (SSPs), Security Assessment Reports (SARs), and related RMF documentation.
• Performs continuous monitoring and ensures compliance with applicable security standards (NIST SP 800-53, ICD 503, CNSS, etc.).
• Provides recommendations for improving system security posture and addresses security incidents as they arise.
• Engages in security testing, evaluation, and certification & accreditation (C&A) activities.
• Interfaces with government customers and stakeholders to effectively communicate technical information and security strategies.

Skills

Security engineering

Risk management

System security design

RMF knowledge

Leadership

Education

CISSP

CAP

CEH

Security+

AWS Security Specialty

Tools

ACAS

Nessus

Tenable

Splunk

Wireshark

HBSS

McAfee ePO

Firewalls

IDS/IPS

SIEMs

VPNs

PKI

MFA

Nmap

Metasploit

Burp Suite

Kali Linux

Python

PowerShell

Bash

JIRA

Confluence

ServiceNow

VMware

Hyper-V

AWS

Azure

Google Cloud

Job description

• Required Security Clearance: Top Secret/SCI with Full Scope Polygraph
• Location: Annapolis Junction, MD
• Work Type: On-Site
• Shift: First

• Requisition ID: 3615
• Standard Title:
• Required Security Clearance: Top Secret/SCI with Full Scope Polygraph
• Location: Annapolis Junction, MD
• Work Type: On-Site
• Shift: First
• Referral Eligibility: Eligible
• U.S. Citizenship Required? Yes

Position Summary

Base-2 Solutions is seeking a highly skilled and motivated Information Systems Security Engineer (ISSE) to join our team. Our ISSEs play a critical role in safeguarding cutting‑edge systems that support national defense and mission‑critical operations. We are looking for security professionals who bring expertise in system security design, risk management, and cybersecurity frameworks, as well as strong leadership qualities and an eagerness to tackle complex challenges. Our ideal candidate will demonstrate versatility, attention to detail, and a commitment to protecting sensitive information and systems as we continue to push technology forward.

Essential Duties And Responsibilities

• Develops, implements, and maintains security solutions for complex systems to ensure confidentiality, integrity, and availability.
• Conducts system security analysis, risk assessments, and vulnerability assessments to identify and mitigate risks.
• Supports the development of security architecture and system security engineering artifacts based on NIST, DoD, and IC policies and guidelines.
• Collaborates with system architects, software engineers, and network engineers to incorporate security requirements into system design.
• Develops and maintains System Security Plans (SSPs), Security Assessment Reports (SARs), and related Risk Management Framework (RMF) documentation.
• Performs continuous monitoring and ensures compliance with applicable security standards (NIST SP 800-53, ICD 503, CNSS, etc.).
• Provides recommendations for improving system security posture and addresses security incidents as they arise.
• Engages in security testing, evaluation, and certification & accreditation (C&A) activities.
• Interfaces with government customers and stakeholders to effectively communicate technical information and security strategies.

Required Qualifications

• Experience with security frameworks and standards such as NIST SP 800-53, RMF, ICD 503, CNSS, DoD STIGs.
• Experience with security tools such as ACAS, Nessus, Tenable, Splunk, Wireshark, HBSS, McAfee ePO.
• Experience with security technologies including Firewalls, IDS/IPS, SIEMs, VPNs, PKI, Multi‑Factor Authentication.
• Experience with system security documentation: SSPs, POA&Ms, SARs, Security Control Traceability Matrix (SCTM).
• Experience with Linux, Unix, Windows, and Virtualization technologies (VMware, Hyper‑V).
• Experience with cloud platforms such as AWS, Azure, Google Cloud with a focus on cloud security.
• Experience with encryption protocols and technologies such as TLS/SSL, IPsec, VPN, PKI.
• Experience with security testing tools: Nmap, Metasploit, Burp Suite, Kali Linux.
• Scripting and automation experience: Python, PowerShell, Bash.
• Knowledge of system development lifecycle (SDLC), software assurance, and secure coding practices.
• Experience with collaboration and issue‑tracking tools like JIRA, Confluence, ServiceNow.
• Certifications such as CISSP, CAP, CEH, Security+, AWS Security Specialty, or equivalent.

Preferred Qualifications

• Not specified.

Required Education and Experience Equivalency

• None specified.

Required Certifications

• CISSP
• CAP
• CEH
• Security+
• AWS Security Specialty
• or equivalent

Required Security Clearance

• Active Top Secret/SCI with Full Scope Polygraph

Pay & Benefit Highlights

Compensation

• Competitive fixed salary or hourly pay (based on experience, skills, location, and internal equity).
• Employee referral bonuses up to $10,000 per hired referral.
• Additional bonus opportunities for exceptional performance and contributions to business development and company growth (role-dependent).

Health

• 100% company‑paid medical premiums for employees and eligible dependents.
• Choose from multiple plan options with CareFirst, Kaiser, and UnitedHealthcare, including PPO, POS, HMO, and HSA‑compatible plans.
• 100% company‑paid dental premiums for employees and eligible dependents.
• 100% company‑paid vision premiums for employees and eligible dependents.

Income Protection

• 100% company‑paid premiums for short‑term disability.
• 100% company‑paid premiums for long‑term disability.
• 100% company‑paid premiums for accidental death & dismemberment (AD&D).
• 100% company‑paid premiums for life insurance up to $200,000.

Retirement

• 401(k) with immediate vesting: 4% company match plus a 4% non‑elective company contribution (8% total).
• 401(k) pre‑tax and Roth options.

Leave

• Up to 20 days of flexible paid time off (PTO).
• 11 paid floating holidays.

Work-Life Balance

• Flexible work schedules, including flex time and compressed work periods (contract and project‑dependent).