Senior DoD RMF Security Engineer

Base-2 Solutions, LLC.; Bethesda, Northern (MD, KY); Hybrid; USD 180,000 - 240,000; Full time

Job summary

Base-2 Solutions, LLC. seeks a senior cyber security engineer to support the DOMEX Technology Platform under NMEC, focusing on secure DoD systems across on‑prem infrastructure. You will integrate RMF into the SDLC, develop security documentation, and ensure compliance with NIST/DoD guidance.

The role requires TS/SCI with CI polygraph eligibility, a 8570.01-M IASAE II cert, and hands-on experience with vulnerability tooling and secure software lifecycles.

Qualifications

• Active TS/SCI with ability to obtain a CI Polygraph.
• Bachelor's degree with ≥10 years of field experience.
• DoD 8570.01-M IASAE Level II cert required (CISSP etc.).
• Developer experience in scripting or programming preferred.
• Experience analyzing vulnerabilities and building mitigations.
• Ability to architect and deploy vulnerability scanning tools.

Responsibilities

• Support secure architecture, design, and DoD system implementation.
• Lead RMF activities within the SDLC and validate security controls.
• Develop SSPs, SARs, risk assessments, and POA&M.
• Apply STIGs and validate compliance with SCAP/ACAS.
• Maintain scanning infra and remediate vulnerabilities.
• Support incident response, forensics, and security automation.

Skills

RMF/SDLC integration

Vulnerability management

DoD security knowledge

Scripting/programming

Windows & Linux administration

Education

Bachelor's degree

Master's degree

PhD

Tools

OWASP

Fortify

SonarQube

Tenable

XACTA

eMASS

SCAP

Job description

Base-2 Solutions, LLC. seeks a senior cyber security engineer to support the DOMEX Technology Platform under NMEC, focusing on secure DoD systems across on‑prem infrastructure. You will integrate RMF into the SDLC, develop security documentation, and ensure compliance with NIST/DoD guidance.

The role requires TS/SCI with CI polygraph eligibility, a 8570.01-M IASAE II cert, and hands-on experience with vulnerability tooling and secure software lifecycles.