On-Site Security Engineer: Vulnerability & RMF Focus

Base-2 Solutions, LLC.; Bethesda (MD); Hybrid; USD 70,000 - 90,000; Full time

Job summary

Base-2 Solutions is seeking a Junior Security Engineer to support day-to-day security activities across enterprise environments. This on-site role in Bethesda, MD will provide hands-on support for security operations, vulnerability management, RMF/ATO activities, system hardening, and continuous monitoring.

The position offers opportunities to develop across multiple cybersecurity areas and take on increased technical responsibility as knowledge and experience grow.

Qualifications

• Bachelor's degree with at least 2 years of relevant experience.
• Active Top Secret/SCI clearance is required.
• DoD 8570.11 IAT Level II certification (Security+ CE, CCNA-Security, GSEC, or SSCP) or CE equivalent.
• US Citizenship is required.
• Experience with Windows Server 2016/2019, Active Directory, IIS, DNS, DHCP, Exchange, and DFS.
• Experience with vulnerability management tools (ACAS, Nessus) and Splunk.

Responsibilities

• Perform day-to-day security activities under supervision, escalating risks as needed.
• Support vulnerability management from identification to closure, including remediation and validation.
• Analyze vulnerability findings with ACAS/Nessus and coordinate remediation with teams.
• Implement and validate security baselines and STIGs across infrastructure.
• Support RMF/ATO activities with evidence and documentation.

Skills

Security engineering

Vulnerability management

RMF/ATO

Documentation

Education

Bachelor's degree with 2+ years experience

Equivalent experience in lieu of degree

Tools

ACAS

Nessus/Tenable

Splunk

McAfee HBSS

Active Directory

Job description

Base-2 Solutions is seeking a Junior Security Engineer to support day-to-day security activities across enterprise environments. This on-site role in Bethesda, MD will provide hands-on support for security operations, vulnerability management, RMF/ATO activities, system hardening, and continuous monitoring.

The position offers opportunities to develop across multiple cybersecurity areas and take on increased technical responsibility as knowledge and experience grow.