Base-2 Solutions, LLC
Cyber Security Engineer 3
Cybersecurity engineer supporting DoD/NMEC systems (DOMEX Technology Platform contract) in Bethesda, MD: integrating RMF into the SDLC, authoring SSPs and POA&Ms, applying STIGs, and running vulnerability scanning and analysis across Windows/Linux on-prem infrastructure. Requires an active TS/SCI with CI polygraph eligibility and an IASAE Level II cert such as CISSP or CASP+.
- Compensation
- Not disclosed
- Location
- Bethesda, MD
- Work setup
- Not specified
- Seniority
- Not specified
- Employment
- Contract
- Experience
- 6+ years
- Category
- Security
- Posted
Skills
Must have
- Active TS/SCI clearance with ability to obtain a CI Polygraph
- Bachelor's degree with 6+ years in the field (or experience equivalency, e.g. HS/GED with 9 years)
- DoD 8570.01-M IASAE Level II certification: CISSP, CISSP-ISSAP, CISSP-ISSEP, CSSLP, or CASP+ CE
- Experience reviewing cybersecurity vulnerabilities and building mitigation/remediation plans across systems, network, application, and database layers
- Ability to architect, deploy, and maintain vulnerability scanning solutions such as OWASP, Fortify, SonarQube, and Tenable
- Experience with XACTA, eMASS, or similar tools
- Strong understanding of Microsoft Windows and Linux/UNIX operating systems
- Experience with middleware/web technologies, databases, TCP/IP networking, and CI/CD platforms
- Familiarity with NIST 800-171, 800-172, NIST SSDF, CMMC, and CNSSI 1253
- Experience supporting DoD/IC systems through the RMF+ process
Nice to have
- Developer experience in at least one scripting or programming language
- Software development experience with Python, Java, or React
- Experience achieving ATO under RMF+
- Experience with big data applications
- Experience with GitLab, Jira, and Confluence
- Experience in Agile environments
- Experience with OIDC or OAuth2
- Experience with Kubernetes, Rancher, Strimzi, Cloudera, Active Directory, and Bash/Python/PowerShell scripting
Full description
Position Summary
Support multiple task orders under the DOMEX Technology Platform contract supporting NMEC by designing, developing, and implementing secure systems in on-premises infrastructure and integrating security across the system lifecycle.
Essential Duties and Responsibilities
- Support the secure architecture, design, and implementation of DoD systems in accordance with DoDI 8510.01, NIST SP 800-53, and other DoD security guidance.
- Lead integration of RMF activities into the SDLC, including selection, implementation, and validation of security controls.
- Develop and maintain SSPs, SARs, risk assessments, and POA&Ms.
- Apply STIGs and validate compliance using SCAP, STIG Viewer, and ACAS.
- Maintain scanning infrastructure and analyze vulnerabilities for mitigation or risk acceptance.
- Support system authorization, incident response, forensics analysis, and security automation efforts.
Required Qualifications
- Active TS/SCI with ability to obtain a CI Polygraph.
- Bachelor's degree with a minimum of six years of experience in the category field. Three additional years of experience may be substituted for the bachelor's degree.
- At least one DoD 8570.01-M IASAE Level II certification: CISSP, CISSP-ISSAP, CISSP-ISSEP, CSSLP, or CASP+ CE.
- Developer experience preferred in at least one scripting or programming language.
- Experience reviewing cybersecurity vulnerabilities for risk and relevance and building mitigation/remediation plans across systems, network, application, and database vulnerabilities.
- Ability to architect, design, troubleshoot, maintain, and deploy vulnerability scanning solutions such as OWASP, Fortify, SonarQube, and Tenable.
- Experience with XACTA, eMASS, or similar tools.
- Strong understanding of Microsoft Windows and Linux/UNIX operating systems.
- Experience with middleware/web technologies, databases, TCP/IP networking, and CI/CD platforms.
- Familiarity with NIST 800-171, 800-172, NIST SSDF, CMMC, and CNSSI 1253.
- Experience supporting DoD/IC systems through the RMF+ process.
Preferred Qualifications
- Software development experience with Python, Java, or React.
- Experience successfully achieving ATO under RMF+.
- Experience with big data applications.
- Experience with GitLab, Jira, and Confluence.
- Experience in Agile environments.
- Experience with OIDC or OAuth2.
- Experience with Kubernetes, Rancher, Strimzi, Cloudera, Active Directory, and scripting languages such as Bash, Python, or PowerShell.
Required Education and Experience Equivalency
- High School Diploma/GED with 9 years of experience.