Lead Security Engineer: Vulnerability & RMF

Base-2 Solutions, LLC.; Bethesda (MD); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

None

Job summary

Base-2 Solutions is seeking a Senior Security Engineer to lead security operations, vulnerability management, RMF/ATO support, and continuous monitoring. This on-site role is based in Bethesda, MD, working with enterprise and isolated environments.

The ideal candidate will have DoD 8570.11 IAT Level II certifications, US citizenship, and strong experience across Windows/Linux systems, AD, and SIEM tools like Splunk.

Qualifications

• Bachelor's degree with 8+ years of relevant experience.
• DoD 8570.11 IAT Level II certification (Security+ CE, CCNA-Security, GSEC, or SSCP) required.
• US Citizenship required due to government contracts.
• Experience with Windows Server, Active Directory, IIS, DNS, DHCP, Exchange, DFS.
• Experience with ACAS, vulnerability management, and DISA STIGs.

Responsibilities

• Lead day-to-day security operations and set priorities for the security team.
• Provide technical leadership to security personnel and other teams.
• Oversee vulnerability management from identification to closure.
• Coordinate remediation across Windows, Linux, network, and desktop support teams.
• Oversee vulnerability scanning using ACAS/Nessus or equivalent.
• Validate security configurations baselines and DISA STIGs across infrastructure.
• Support RMF/ATO activities and create control evidence and BoE.
• Review security logs with Splunk and other SIEM tools and address issues.
• Develop repeatable security processes for vulnerability management and monitoring.
• Track risks, remediation status, and communicate with leadership.

Skills

Security operations

Vulnerability management

SIEM

DoD 8570.11 IAT II certs

Networking knowledge

Education

Bachelor's degree in CS/IT

Tools

ACAS

Tenable/Nessus

Splunk

McAfee HBSS

Active Directory

Job description

Base-2 Solutions is seeking a Senior Security Engineer to lead security operations, vulnerability management, RMF/ATO support, and continuous monitoring. This on-site role is based in Bethesda, MD, working with enterprise and isolated environments.

The ideal candidate will have DoD 8570.11 IAT Level II certifications, US citizenship, and strong experience across Windows/Linux systems, AD, and SIEM tools like Splunk.