Junior Security Engineer

Base-2 Solutions; Bethesda (MD); On-site; USD 90,000 - 120,000; Full time

Benefits offered by this job

Health premiums paid by employer

Dental premiums paid by employer

Vision premiums paid by employer

401(k) with company match

Paid time off up to 20 days

Job summary

Base-2 Solutions is seeking a Junior Security Engineer to support day-to-day security activities across enterprise and isolated environments on-site in Bethesda, MD. The role includes hands-on security operations, vulnerability management, RMF/ATO activities, system hardening, and continuous monitoring to grow technical responsibility.

The position emphasizes collaboration with Windows/Linux/network engineering teams, adherence to DISA STIGs, and documentation of security controls, evidence, and

Qualifications

• Experience aligning security requirements with performance and latency considerations across front/m middle/back ends.
• Experience implementing security controls on network services and Active Directory across distributed sites.
• Experience with networking technologies and security assessments, including STIGs.
• Experience with enterprise security/malware monitoring tools such as Splunk, McAfee HBSS, ACAS.
• Ability to document networking/operational procedures and LAN/WAN topology with MS Visio/Project/Excel/Word.

Responsibilities

• Perform day-to-day security activities under supervision and escalate risks as appropriate.
• Support vulnerability management from detection to remediation, validation, and documentation.
• Perform vulnerability scanning with ACAS/Tenable/Nessus and analyze findings.
• Assist with vulnerability remediation across Windows/Linux components and network services.
• Support RMF/ATO activities including BoE, POA&Ms, and NIST SP 800-53 compliance.
• Review system/configuration changes for security impact and document findings.

Skills

Security engineering

Networking

Vulnerability management

Documentation

TCP/IP

Windows/Linux knowledge

Education

Bachelor's degree or equivalent

Tools

Active Directory

IIS

DNS

DHCP

Exchange

DFS

ACAS

Tenable/Nessus

Splunk

McAfee HBSS

Job description

• Required Security Clearance: Top Secret/SCI


• Location: Bethesda, MD


• Work Type: On-Site


• Shift: First

• Requisition ID: 5283


• Standard Title:


• Required Security Clearance: Top Secret/SCI


• Location: Bethesda, MD


• Work Type: On-Site


• Shift: First


• Referral Eligibility: Eligible


• U.S. Citizenship Required? Yes

Position Summary

Base-2 Solutions is seeking a Junior Security Engineer to support day-to-day security activities across enterprise and isolated environments. This on-site position in Bethesda, MD will provide hands-on support for security operations, vulnerability management, RMF/ATO activities, system hardening, and continuous monitoring. The role offers opportunities to develop across multiple areas of cybersecurity and take on increased technical responsibility as knowledge and experience grow.

Essential Duties And Responsibilities

• Perform day-to-day security activities under the direction of senior security personnel and escalates risks, technical issues, and blockers as appropriate.


• Support vulnerability management activities from identification through closure, including analysis, remediation, validation, and documentation.


• Perform vulnerability scanning and analyze findings using ACAS, Tenable/Nessus, or equivalent technologies.


• Work with Windows, Linux, network, desktop support, and other engineering teams to assist with vulnerability remediation and security-related technical issues.


• Implement and validate DISA STIGs and approved security configuration baselines across infrastructure systems.


• Perform recurring security activities, including audit log reviews, account reviews, vulnerability reviews, security control validation, and continuous monitoring.


• Support RMF/ATO activities, including security documentation, control evidence, Body of Evidence (BoE), POA&Ms, and compliance with NIST SP 800-53, ICD 503, and applicable security directives.


• Assist with reviewing system and configuration changes for potential security impact and document findings for review by senior security personnel and the ISSM.


• Support security activities for isolated or restricted environments, including vulnerability scanning, logging, patching, hardening, and security monitoring.


• Review security logs and events using Splunk or equivalent SIEM/log-management technologies and escalates identified issues as appropriate.


• Assist with maintaining security procedures, documentation, compliance evidence, and vulnerability remediation records.


• Track assigned security findings, remediation activities, and action items through completion and provide status updates as required.


• Participate in security reviews, engineering meetings, and Technical Exchange Meetings (TEMs) as required.


• Research security vulnerabilities, technical requirements, and remediation approaches and provide findings and recommendations to senior security personnel.


• Develop technical knowledge across the environment and take on increased responsibility for security activities as experience and proficiency grow.

Required Qualifications

• Relevant experience meeting an applicable education/experience pathway in the equivalency section.


• Experience with application performance and latency problems related to security requirements from front, middle, and back end.


• Working experience with Windows Server 2016/2019, Active Directory, IIS, DNS, DHCP, Exchange, and DFS.


• Experience implementing security controls on common network services such as file, email, and Active Directory across multiple geographically dispersed sites.


• Experience with networking technologies and security assessment, including STIGs.


• Experience implementing and supporting enterprise system security and malware monitoring and prevention tools such as Splunk, McAfee HBSS, and ACAS.


• Solid network and systems troubleshooting experience with TCP/IP, Internet security, and encryption, including data at rest and data in transit.


• Ability to produce clear and concise documents and diagrams capturing networking and operational procedures and LAN/WAN topology using MS Visio, MS Project, MS Excel, and MS Word.


• US Citizenship is required due to the nature of the government contracts supported.

Preferred Qualifications

• CISSP certification.


• CASP certification.

Required Education and Experience Equivalency

• Bachelor's degree with at least 2 years of relevant experience.


• Additional years of relevant experience in lieu of a degree.

Required Certifications

• Candidate must, at a minimum, meet DoD 8570.11- IAT Level II certification requirements, currently Security+ CE, CCNA-Security, GSEC, or SSCP along with an appropriate computing environment (CE) certification.

Required Security Clearance

• Active Top Secret/SCI

Equal Employment Opportunity

Base-2 Solutions is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy), national origin, age, sexual orientation, gender identity, genetic information, protected veteran status, or any other characteristic protected by law, and will not be discriminated against on the basis of disability. Learn more: base-2solutions.com/eeo

Pay & Benefit Highlights

Compensation

• Competitive fixed salary or hourly pay (based on experience, skills, location, and internal equity).


• Employee referral bonuses up to $10,000 per hired referral.


• Additional bonus opportunities for exceptional performance and contributions to business development and company growth (role-dependent).

Health

• 100% company-paid medical premiums for employees and eligible dependents.


• Choose from multiple plan options with CareFirst, Kaiser, and UnitedHealthcare, including PPO, POS, HMO, and HSA-compatible plans.


• 100% company-paid dental premiums for employees and eligible dependents.


• 100% company-paid vision premiums for employees and eligible dependents.

Income Protection

• 100% company-paid premiums for short-term disability.


• 100% company-paid premiums for long-term disability.


• 100% company-paid premiums for accidental death & dismemberment (AD&D).


• 100% company-paid premiums for life insurance up to $200,000.

Retirement

• 401(k) with immediate vesting: 4% company match plus a 4% non-elective company contribution (8% total).


• 401(k) pre-tax and Roth options.

Leave

• Up to 20 days of flexible paid time off (PTO).


• 11 paid floating holidays.

Work-Life Balance

• Flexible work schedules, including flex time and compressed work periods (contract and project-dependent).