Junior Security Engineer

Base-2 Solutions is hiring a Junior Security Engineer to support day-to-day security operations across enterprise and isolated environments in Bethesda, MD.

Responsibilities

• Support day-to-day security activities under senior security personnel direction; escalate risks, technical issues, and blockers as appropriate
• Assist with vulnerability management from identification through closure, including analysis, remediation, validation, and documentation
• Run vulnerability scanning and analyze results using ACAS, Tenable/Nessus, or equivalent technologies
• Coordinate with Windows, Linux, network, desktop support, and other engineering teams to support vulnerability remediation and security-related technical issues
• Implement and validate DISA STIGs and approved security configuration baselines across infrastructure systems
• Perform recurring security tasks such as audit log reviews, account reviews, vulnerability reviews, security control validation, and continuous monitoring
• Support RMF/ATO activities, including security documentation, control evidence, Body of Evidence (BoE), POA&Ms, and alignment with NIST SP 800-53, ICD 503, and applicable security directives
• Review system and configuration changes for potential security impact and document findings for review by senior security personnel and the ISSM
• Support security activities for isolated or restricted environments, including vulnerability scanning, logging, patching, hardening, and security monitoring
• Review security logs and events using Splunk or equivalent SIEM/log-management tooling; escalate identified issues as appropriate
• Help maintain security procedures, documentation, compliance evidence, and vulnerability remediation records
• Track assigned security findings and remediation action items through completion and provide required status updates
• Attend security reviews, engineering meetings, and Technical Exchange Meetings (TEMs) as required
• Research security vulnerabilities and remediation approaches; share findings and recommendations with senior security personnel
• Develop technical knowledge across the environment and take on increased security responsibilities as experience and proficiency grow

Requirements

• Relevant experience meeting an applicable education/experience pathway in the equivalency section
• Experience addressing application performance and latency problems related to security requirements across front, middle, and back end
• Working experience with Windows Server 2016/2019, Active Directory, IIS, DNS, DHCP, Exchange, and DFS
• Experience implementing security controls on common network services such as file, email, and Active Directory across multiple geographically dispersed sites
• Experience with networking technologies and security assessment, including STIGs
• Experience implementing and supporting enterprise system security and malware monitoring/prevention tools such as Splunk, McAfee HBSS, and ACAS
• Solid troubleshooting experience with TCP/IP, Internet security, and encryption, including data at rest and data in transit
• Ability to create clear technical documentation and diagrams covering networking/operational procedures and LAN/WAN topology using MS Visio, MS Project, MS Excel, and MS Word
• US Citizenship required due to government contract requirements
• Must meet DoD 8570.11-IAT Level II certification requirements, currently Security+ CE, CCNA-Security, GSEC, or SSCP plus an appropriate computing environment (CE) certification
• Required security clearance: Active Top Secret/SCI

Technologies

• ACAS, Tenable/Nessus, DISA STIGs, NIST SP 800-53, ICD 503
• Splunk, SIEM, log-management technologies
• Windows Server 2016/2019, Active Directory, IIS, DNS, DHCP, Exchange, DFS
• McAfee HBSS, TCP/IP, encryption
• MS Visio, MS Project, MS Excel, MS Word
• Security+ CE, CCNA-Security, GSEC, SSCP, DoD 8570.11-IAT Level II

Benefits

• Competitive fixed salary or hourly pay (based on experience, skills, location, and internal equity)
• Employee referral bonuses up to $10,000 per hired referral
• Additional bonus opportunities for exceptional performance and contributions to business development and company growth (role-dependent)
• 100% company-paid medical premiums for employees and eligible dependents (CareFirst, Kaiser, UnitedHealthcare plans including PPO, POS, HMO, and HSA-compatible options)
• 100% company-paid dental premiums
• 100% company-paid vision premiums
• 100% company-paid short-term disability premiums
• 100% company-paid long-term disability premiums
• 100% company-paid AD&D premiums
• 100% company-paid life insurance up to $200,000
• 401(k) with immediate vesting: 4% company match plus 4% non-elective company contribution (8% total); pre-tax and Roth options
• Up to 20 days flexible paid time off (PTO)
• 11 paid floating holidays
• Flexible work schedules including flex time and compressed work periods (contract and project-dependent)

Preferred Qualifications

• CISSP certification
• CASP certification

Required Education and Experience Equivalency

• Bachelor’s degree with at least 2 years of relevant experience
• Additional years of relevant experience in lieu of a degree