Senior Information Security Engineer (ISSE) — RMF/NIST Expert

RPMGlobal; Annapolis (MD); On-site; USD 120,000 - 190,000; Full time

Job summary

Base-2 Solutions seeks an Information Systems Security Engineer (ISSE) to safeguard complex, national-defense-grade systems. The role focuses on system security design, RMF-based risk management, and cybersecurity alignment with DoD/IC policies, engaging with government customers.

Candidates should demonstrate leadership, attention to detail, and hands-on experience with SSPs/SARs, continuous monitoring, and security testing across Linux, Windows, and cloud platforms.

Qualifications

• Experience with security frameworks and standards such as NIST SP 800-53, RMF, ICD 503, CNSS, DoD STIGs.
• Experience with security tools such as ACAS, Nessus, Tenable, Splunk, Wireshark, HBSS, McAfee ePO.
• Experience with security technologies including Firewalls, IDS/IPS, SIEMs, VPNs, PKI, Multi-Factor Authentication.
• Experience with system security documentation: SSPs, POA&Ms, SARs, SCTM.
• Experience with Linux, Unix, Windows, and Virtualization technologies (VMware, Hyper‑V).
• Experience with cloud platforms such as AWS, Azure, Google Cloud with a focus on cloud security.
• Experience with encryption protocols and technologies such as TLS/SSL, IPsec, VPN, PKI.
• Experience with security testing tools: Nmap, Metasploit, Burp Suite, Kali Linux.
• Scripting and automation experience: Python, PowerShell, Bash.
• Knowledge of SDLC, software assurance, and secure coding practices.
• Experience with JIRA, Confluence, ServiceNow.
• Certifications such as CISSP, CAP, CEH, Security+, AWS Security Specialty, or equivalent.

Responsibilities

• Develops, implements, and maintains security solutions for complex systems to ensure confidentiality, integrity, and availability.
• Conducts system security analysis, risk assessments, and vulnerability assessments to identify and mitigate risks.
• Supports the development of security architecture and system security engineering artifacts based on NIST, DoD, and IC policies and guidelines.
• Collaborates with system architects, software engineers, and network engineers to incorporate security requirements into system design.
• Develops and maintains System Security Plans (SSPs), Security Assessment Reports (SARs), and related RMF documentation.
• Performs continuous monitoring and ensures compliance with applicable security standards (NIST SP 800-53, ICD 503, CNSS, etc.).
• Provides recommendations for improving system security posture and addresses security incidents as they arise.
• Engages in security testing, evaluation, and certification & accreditation (C&A) activities.
• Interfaces with government customers and stakeholders to communicate technical information and security strategies.

Skills

RMF

NIST 800-53

DoD policies

IC policies

System security design

Risk assessment

Security architecture

C&A processes

Vulnerability assessment

Security testing

Tools

ACAS

Nessus

Tenable

Splunk

Wireshark

HBSS

McAfee ePO

Firewalls

IDS/IPS

SIEMs

VPNs

PKI

MFA

Nmap

Metasploit

Burp Suite

Kali Linux

Python

PowerShell

Job description

Base-2 Solutions seeks an Information Systems Security Engineer (ISSE) to safeguard complex, national-defense-grade systems. The role focuses on system security design, RMF-based risk management, and cybersecurity alignment with DoD/IC policies, engaging with government customers.

Candidates should demonstrate leadership, attention to detail, and hands-on experience with SSPs/SARs, continuous monitoring, and security testing across Linux, Windows, and cloud platforms.