Senior Security Engineer

Base-2 Solutions; Bethesda (MD); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical premiums for employee & depend

Dental premiums for employee & depend

Vision premiums for employee & depend

Life insurance

401(k) with match

PTO & floating holidays

Job summary

Base-2 Solutions seeks a Senior Security Engineer to lead day-to-day security operations at the customer site in Bethesda, MD. This role requires hands-on technical leadership for vulnerability management, RMF/ATO support, continuous monitoring, and security engineering across enterprise environments.

The position demands DoD 8570.11 IAT Level II certifications, U.S. citizenship, and a strong background in DISA STIGs, SIEM, and secure configuration baselines.

Qualifications

• Experience supporting security operations for enterprise and restricted environments.
• Knowledge of RMF/ACCP/STIGs and compliance requirements.
• DoD 8570.11 IAT Level II certifications (Security+ CE, CCNA-Security, GSEC, SSCP).
• U.S. Citizenship required due to government contracts.

Responsibilities

• Lead day-to-day security operations and set priorities for the security team.
• Provide technical leadership to security personnel and engineers.
• Oversee vulnerability management from discovery to remediation and validation.
• Coordinate remediation across Windows, Linux, network, and desktop teams; provide hands-on support as needed.
• Oversee vulnerability scanning and analysis with ACAS/Tenable/Nessus.
• Ensure DISA STIGs and baselines are implemented and validated.
• Support RMF/ATO activities with evidence, BoE, POA&Ms, and NIST SP 800-53 alignment.
• Review security logs with Splunk and monitor security events.
• Develop repeatable processes for vulnerability management and continuous monitoring.
• Track risks and communicate status to leadership and customers.
• Participate in TEMs, security reviews, and customer discussions.
• Mentor security and technical staff as assigned.

Skills

Security operations

Vulnerability management

RMF/ATO

Security leadership

Documentation & diagrams

Education

Bachelor's degree in Computer Science/IT or related field

Tools

ACAS

Tenable/Nessus

Splunk

Job description

• Required Security Clearance: Top Secret/SCI
• Location: Bethesda, MD
• Work Type: On-Site
• Shift: First

• Required Security Clearance: Top Secret/SCI
• Location: Bethesda, MD
• Work Type: On-Site
• Shift: First
• Referral Eligibility: Eligible
• U.S. Citizenship Required? Yes

Position Summary

Base-2 Solutions is seeking a Senior Security Engineer to serve as the technical lead for day-to-day security activities supporting enterprise and isolated environments. This hands-on technical lead will provide technical leadership and oversight for security operations, vulnerability management, RMF/ATO support, continuous monitoring, and security engineering activities. The position is 100% on-site, with all work performed at the customer site in Bethesda, MD.

Essential Duties And Responsibilities

• Lead and coordinate day-to-day security operations, establish priorities, and assign and track activities across the security team.
• Provide technical leadership and guidance to security personnel, system administrators, engineers, and other technical teams.
• Lead vulnerability management from identification through closure, including analysis, prioritization, remediation, validation, and documentation.
• Coordinate vulnerability remediation across Windows, Linux, network, desktop support, and other engineering teams, and provide hands-on support for complex or high-priority issues as needed.
• Oversee and perform vulnerability scanning and analysis using ACAS, Tenable/Nessus, or equivalent technologies.
• Oversee implementation and validation of DISA STIGs and approved security configuration baselines across infrastructure systems.
• Ensure recurring security activities are performed, including audit log and account reviews, vulnerability reviews, security control validation, and continuous monitoring.
• Support and oversee RMF/ATO activities, including security documentation, control evidence, Body of Evidence (BoE), POA&Ms, and compliance with NIST SP 800-53, ICD 503, and applicable security directives.
• Work with the ISSM to translate security and compliance requirements into technical and operational activities and evaluate system or configuration changes for potential security impact.
• Provide security oversight and technical support for isolated or restricted environments, including vulnerability scanning, logging, patching, hardening, and security monitoring.
• Review security logs and events using Splunk or equivalent SIEM/log-management technologies and ensure identified issues are appropriately addressed.
• Develop and maintain repeatable security processes and procedures for vulnerability management, compliance monitoring, evidence collection, and security operations.
• Track security risks, deficiencies, remediation activities, and compliance status, and communicate status, risks, and recommendations to customer and program leadership.
• Participate in Technical Exchange Meetings (TEMs), security reviews, engineering meetings, and customer discussions related to system security and accreditation.
• Manage, supervise, and mentor security and technical staff as assigned.

Required Qualifications

• Education and relevant experience meeting an applicable pathway in the Required Education and Experience Equivalency section.
• Experience with application performance and latency problems related to security requirements from front, middle, and back end.
• Working experience with Windows Server 2016/2019, Active Directory, IIS, DNS, DHCP, Exchange, and DFS.
• Experience implementing security controls on common network services such as file, email, and Active Directory across multiple geographically dispersed sites.
• Experience with networking technologies and security assessment, including but not limited to STIGs.
• Experience implementing and supporting enterprise system security and malware monitoring and prevention tools such as Splunk, McAfee HBSS, and ACAS.
• Solid network and systems troubleshooting experience with TCP/IP, Internet security, and encryption, including data at rest and data in transit.
• Ability to produce clear and concise documents and diagrams capturing networking and operational procedures and LAN/WAN topology using MS Visio, MS Project, MS Excel, and MS Word.
• Candidate must, at a minimum, meet DoD 8570.11- IAT Level II certification requirements, currently Security+ CE, CCNA-Security, GSEC, or SSCP along with an appropriate computing environment (CE) certification.
• US Citizenship is required due to the nature of the government contracts we support.

Preferred Qualifications

• Experience managing and/or supervising a team of technical professionals.
• CISSP or CASP Certification.

Required Education and Experience Equivalency

• Bachelor's degree in Computer Science, Information Technology, or a related field with at least 8 years of relevant experience.
• Additional years of experience may be considered in lieu of degree.

Required Certifications

• Candidate must, at a minimum, meet DoD 8570.11- IAT Level II certification requirements (currently Security+ CE, CCNA-Security, GSEC, or SSCP along with an appropriate computing environment (CE) certification).

Required Security Clearance

• Active Top Secret/SCI

Equal Employment Opportunity

Base-2 Solutions is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy), national origin, age, sexual orientation, gender identity, genetic information, protected veteran status, or any other characteristic protected by law, and will not be discriminated against on the basis of disability. Learn more: base-2solutions.com/eeo

Pay & Benefit Highlights

Compensation

• Competitive fixed salary or hourly pay (based on experience, skills, location, and internal equity).
• Employee referral bonuses up to $10,000 per hired referral.
• Additional bonus opportunities for exceptional performance and contributions to business development and company growth (role-dependent).

Health

• 100% company-paid medical premiums for employees and eligible dependents.
• Choose from multiple plan options with CareFirst, Kaiser, and UnitedHealthcare, including PPO, POS, HMO, and HSA-compatible plans.
• 100% company-paid dental premiums for employees and eligible dependents.
• 100% company-paid vision premiums for employees and eligible dependents.

Income Protection

• 100% company-paid premiums for short-term disability.
• 100% company-paid premiums for long-term disability.
• 100% company-paid premiums for accidental death & dismemberment (AD&D).
• 100% company-paid premiums for life insurance up to $200,000.

Retirement

• 401(k) with immediate vesting: 4% company match plus a 4% non-elective company contribution (8% total).
• 401(k) pre-tax and Roth options.

Leave

• Up to 20 days of flexible paid time off (PTO).
• 11 paid floating holidays.

Work-Life Balance

• Flexible work schedules, including flex time and compressed work periods (contract and project-dependent).