On-Site Senior Security Engineer: Vulnerability & RMF Lead

Base-2 Solutions; Bethesda (MD); On-site; USD 130,000 - 180,000; Full time

Job summary

Base-2 Solutions is seeking a Senior Security Engineer to serve as the technical lead for day-to-day security activities at client sites in Bethesda, MD. This on-site role requires strong leadership in security operations, vulnerability management, RMF/ATO support, and continuous monitoring.

You will oversee vulnerability remediation across multiple teams, ensure DISA STIGs implementation, and coordinate with ISSM to translate requirements into actionable tasks.

Qualifications

• Bachelor's degree with at least 8 years of relevant experience.
• DoD 8570.11 IAT Level II certs (Security+ CE, CCNA‑Security, GSEC or SSCP) or equivalent.
• US Citizenship is required due to government contracts.

Responsibilities

• Lead day-to-day security operations and coordinate priorities across the security team.
• Provide technical leadership and guidance to security personnel and IT teams.
• Manage vulnerability lifecycle from identification to remediation and documentation.
• Oversee vulnerability scanning using ACAS/Tenable/Nessus and validate security baselines including DISA STIGs.
• Support RMF/ATO activities with security documentation, BoE, POA&Ms, and evidence collection.
• Review logs with Splunk and ensure timely remediation of identified issues.

Skills

Security operations leadership

Vulnerability management

RMF/ATO support

Continuous monitoring

Technical leadership

Documentation

Education

Bachelor's degree in Computer Science / Information Technology or related field

Tools

ACAS

Tenable/Nessus

DISA STIGs

Splunk

Active Directory

Job description

Base-2 Solutions is seeking a Senior Security Engineer to serve as the technical lead for day-to-day security activities at client sites in Bethesda, MD. This on-site role requires strong leadership in security operations, vulnerability management, RMF/ATO support, and continuous monitoring.

You will oversee vulnerability remediation across multiple teams, ensure DISA STIGs implementation, and coordinate with ISSM to translate requirements into actionable tasks.