Senior DoD RMF & Cyber Security Engineer

Base-2 Solutions, LLC.; Bethesda, Northern (MD, KY); Hybrid; USD 140,000 - 190,000; Full time

Job summary

Base-2 Solutions, LLC. seeks a highly skilled security professional to design, implement, and secure DoD systems. You will integrate RMF into the SDLC, validate controls, and maintain SSPs, SARs, risk assessments, and POA&Ms while applying STIGs with SCAP/ACAS.

Qualified candidates hold TS/SCI with CI Poly, IASAE II, and experience with vulnerability scanning tools and DoD guidance. Strong Linux/Windows, scripting, and CI/CD capabilities are essential for success.

Qualifications

• Active TS/SCI with ability to obtain a CI Polygraph.
• Bachelor's degree with six years of experience; three years may substitute.
• DoD 8570.01-M IASAE Level II cert: CISSP/CISSP-ISSAP/CISSP-ISSEP/CSSLP/CASP+ CE.
• Developer experience in at least one scripting or programming language.
• Experience reviewing vulnerabilities and building mitigation plans.
• Architect, design, troubleshoot, and deploy vulnerability scanning (OWASP/Fortify/SonarQube/Tenable).
• Experience with XACTA/eMASS or similar tools.
• Strong Windows and Linux knowledge.
• Experience with middleware/web tech, databases, TCP/IP, and CI/CD.
• Familiar with NIST 800-171/800-172, NIST SSDF, CMMC, CNSSI 1253.
• Experience supporting DoD/IC systems through RMF+.

Responsibilities

• Support secure DoD system architecture, design, and implementation per DoDI 8510.01 and NIST guidance.
• Lead RMF activities within the SDLC, selecting and validating controls.
• Develop and maintain SSPs, SARs, risk assessments, and POA&Ms.
• Apply STIGs and validate compliance using SCAP, STIG Viewer, and ACAS.
• Maintain scanning infrastructure and analyze vulnerabilities for mitigation.
• Support authorization, incident response, forensics, and security automation.

Skills

TS/SCI clearance

CI Polygraph

8570 IASAE II

Vulnerability management

RMF/SDLC integration

Python development

Windows/Linux admin

Education

Bachelor's degree or higher

High School Diploma + 9 years

Tools

OWASP

Fortify

SonarQube

Tenable

SCAP/STIG Tools

XACTA/eMASS

GitLab

Jira

Confluence

Kubernetes

Job description

Base-2 Solutions, LLC. seeks a highly skilled security professional to design, implement, and secure DoD systems. You will integrate RMF into the SDLC, validate controls, and maintain SSPs, SARs, risk assessments, and POA&Ms while applying STIGs with SCAP/ACAS.

Qualified candidates hold TS/SCI with CI Poly, IASAE II, and experience with vulnerability scanning tools and DoD guidance. Strong Linux/Windows, scripting, and CI/CD capabilities are essential for success.