Base-2 Solutions is seeking an Information Systems Security Engineer (ISSE) to help protect national defense and mission-critical systems.

Develop, implement, and maintain security solutions for complex systems to support confidentiality, integrity, and availability.
Perform system security analysis, risk assessments, and vulnerability assessments to identify and reduce risk.
Support security architecture and system security engineering artifacts using NIST, DoD, and IC policies and guidelines.
Partner with system architects, software engineers, and network engineers to incorporate security requirements into system design.
Develop and maintain System Security Plans (SSPs), Security Assessment Reports (SARs), and related Risk Management Framework (RMF) documentation.
Conduct continuous monitoring and maintain compliance with security standards such as NIST SP 800-53, ICD 503, and CNSS.
Recommend improvements to system security posture and respond to security incidents as needed.
Support security testing, evaluation, and certification and accreditation (C&A) activities.
Interface with government customers and stakeholders to communicate technical information and security strategies.

Experience with cybersecurity frameworks and standards including NIST SP 800-53, RMF, ICD 503, CNSS, and DoD STIGs.
Hands-on experience with security tools such as ACAS, Nessus, Tenable, Splunk, Wireshark, HBSS, and McAfee ePO.
Experience with security technologies including firewalls, IDS/IPS, SIEMs, VPNs, PKI, and multi-factor authentication.
Experience producing and maintaining system security documentation: SSPs, POA&Ms, SARs, and Security Control Traceability Matrix (SCTM).
Experience with Linux, Unix, Windows, and virtualization technologies such as VMware and Hyper-V.
Experience with cloud platforms (AWS, Azure, Google Cloud) with a focus on cloud security.
Knowledge of encryption protocols and technologies including TLS/SSL, IPsec, VPN, and PKI.
Experience with security testing tools such as Nmap, Metasploit, Burp Suite, and Kali Linux.
Scripting and automation experience with Python, PowerShell, and Bash.
Knowledge of SDLC, software assurance, and secure coding practices.
Experience collaborating with issue-tracking and documentation tools including JIRA, Confluence, and ServiceNow.
Active clearance: Top Secret/SCI with Full Scope Polygraph.
U.S. citizenship required: Yes.
Certifications: CISSP, CAP, CEH, Security+, AWS Security Specialty, or equivalent.

ACAS, Nessus, Tenable, Splunk, Wireshark, HBSS, McAfee ePO
Firewalls, IDS/IPS, SIEMs, VPNs, PKI, Multi-Factor Authentication
System Security Plans (SSPs), Security Assessment Reports (SARs), Risk Management Framework (RMF) documentation
NIST SP 800-53, ICD 503, CNSS, NIST, DoD, IC, RMF, DoD STIGs
Nmap, Metasploit, Burp Suite, Kali Linux
Python, PowerShell, Bash
Linux, Unix, Windows, VMware, Hyper-V
AWS, Azure, Google Cloud
TLS/SSL, IPsec, JIRA, Confluence, ServiceNow
CISSP, CAP, CEH, Security+, AWS Security Specialty

Competitive fixed salary or hourly pay (based on experience, skills, location, and internal equity).
Employee referral bonuses up to $10,000 per hired referral.
Additional bonus opportunities for exceptional performance and contributions to business development and company growth (role-dependent).
100% company-paid medical premiums for employees and eligible dependents (CareFirst, Kaiser, and UnitedHealthcare; PPO, POS, HMO, and HSA-compatible plans).
100% company-paid dental premiums for employees and eligible dependents.
100% company-paid vision premiums for employees and eligible dependents.
100% company-paid premiums for short-term disability.
100% company-paid premiums for long-term disability.
100% company-paid premiums for accidental death & dismemberment (AD&D).
100% company-paid life insurance up to $200,000.
401(k) with immediate vesting: 4% company match plus 4% non-elective company contribution (8% total). Pre-tax and Roth options.
Up to 20 days of flexible paid time off (PTO).
11 paid floating holidays.
Flexible work schedules, including flex time and compressed work periods (contract and project-dependent).

Information Systems Security Engineer

Job Description