Cybersecurity Engineer 3
Job Description
Base-2 Solutions is seeking a Cybersecurity Engineer 3 to help safeguard digital assets and sensitive information. The role focuses on designing and maintaining cybersecurity infrastructure, conducting assessments, monitoring for incidents, and coordinating security activities across the development lifecycle under a Top Secret/SCI clearance.
Responsibilities
- Design, implement, and manage security solutions, including firewalls, intrusion detection and intrusion prevention systems, endpoint protection, and encryption mechanisms.
- Perform regular security assessments to identify vulnerabilities and weaknesses across systems, networks, and applications.
- Develop and implement incident response plans to support effective security incident and breach handling.
- Partner with cross-functional teams to establish and enforce security policies, standards, and procedures.
- Monitor network traffic, system logs, and security alerts to detect and respond to potential incidents.
- Analyze anomalies and investigate security breaches, then take appropriate actions to mitigate risk.
- Coordinate with IT, software development, compliance, and other teams to integrate security into all phases of the development lifecycle.
- Maintain accurate documentation of security processes, procedures, and configurations.
- Produce detailed reports on security findings, incidents, and actions taken.
Requirements
- Active Top Secret/SCI with CI Polygraph.
- 7+ years of experience as a cybersecurity engineer, with specialization in designing and building implementations of required security controls.
- Experience implementing continuous monitoring and auditing of solutions to meet compliance needs for security controls.
- Strong capability specifying and implementing log collection into tools such as Splunk.
- Experience querying and analyzing aggregated logs to identify security-relevant anomalies or risks.
- Strong experience implementing security controls from government regulatory frameworks and security standards, including NIST SP 800-53, RMF, ICD 503, FISMA, and FedRAMP.
- Experience implementing controls for cloud, container, and DevSecOps services and solutions within IL5 to IL6+ environments.
- Strong understanding of network protocols, operating systems, and infrastructure components.
- Proficiency in incident response, security incident handling, and forensic analysis techniques.
- Experience with security tools including Fortify, Acunetix, and Prisma Cloud.
- Effective communication skills to explain complex technical concepts to technical and non-technical stakeholders.
- CISSP or equivalent certification to support DoD 8140 requirements.
Technology Stack
- Splunk
- Fortify
- Acunetix
- Prisma Cloud
- NIST SP 800-53, RMF, ICD 503, FISMA, FedRAMP
- DevSecOps
- Cloud and container environments
Compensation
Competitive fixed salary or hourly pay (based on experience, skills, location, and internal equity). Employee referral bonuses are available up to $10,000 per hired referral. Additional bonus opportunities may be offered for exceptional performance and contributions to business development and company growth (role-dependent).
Benefits
- Medical: 100% company-paid premiums for employees and eligible dependents; multiple plan options through CareFirst, Kaiser, and UnitedHealthcare, including PPO, POS, HMO, and HSA-compatible plans.
- Dental: 100% company-paid premiums for employees and eligible dependents.
- Vision: 100% company-paid premiums for employees and eligible dependents.
- Short-term disability: 100% company-paid premiums.
- Long-term disability: 100% company-paid premiums.
- AD&D: 100% company-paid premiums.
- Life insurance: 100% company-paid premiums up to $200,000.
Retirement and Leave
- 401(k): immediate vesting with 4% company match plus 4% non-elective company contribution (8% total); pre-tax and Roth options.
- PTO: up to 20 days of flexible paid time off.
- Holidays: 11 paid floating holidays.
Work Schedule
Flexible work schedules are available, including flex time and compressed work periods (contract and project-dependent).
Location and Clearance
This position is located in the United States (onsite) and requires an Active Top Secret/SCI with CI Polygraph.