On-Site Senior Security Engineer - Vulnerability & Compliance Lead

RPMGlobal; Bethesda, Northern (MD, KY); Hybrid; USD 140,000 - 190,000; Full time

Job summary

Base-2 Solutions seeks a Senior Security Engineer to lead security operations, vulnerability management, and RMF/ATO support at a Bethesda site. This hands-on role requires coordinating across Windows/Linux teams, applying DISA STIGs, and maintaining continuous monitoring and security documentation.

The candidate will mentor staff, review logs with SIEM tools, and ensure compliance with NIST SP 800-53 and ICD 503. Active TS/SCI is required.

Qualifications

• Lead and coordinate day‑to‑day security operations and set priorities.
• Oversee vulnerability management from detection to remediation.
• Support RMF/ATO activities with documentation and evidence.
• Review security logs and events using SIEM tools like Splunk.
• Ensure DISA STIGs and baseline configurations are applied.
• Mentor staff and communicate risk and status clearly.

Responsibilities

• Lead security operations, assign tasks, and track progress.
• Provide technical guidance to security and engineering teams.
• Coordinate remediation across Windows, Linux, and networks.
• Oversee vulnerability scanning with ACAS/Tenable/Nessus.
• Translate requirements into technical and operational actions.

Skills

Security leadership

Vulnerability management

RMF/ATO

Continuous monitoring

Security engineering

Technical guidance

Education

Bachelor's degree in CS/IT

DoD 8570.11 IAT Level II cert (Security+ CE, CCNA-Security, GSEC, SSCP)

Tools

ACAS

Tenable Nessus

Splunk

McAfee HBSS

Active Directory / Windows security

Job description

Base-2 Solutions seeks a Senior Security Engineer to lead security operations, vulnerability management, and RMF/ATO support at a Bethesda site. This hands-on role requires coordinating across Windows/Linux teams, applying DISA STIGs, and maintaining continuous monitoring and security documentation.

The candidate will mentor staff, review logs with SIEM tools, and ensure compliance with NIST SP 800-53 and ICD 503. Active TS/SCI is required.