Junior Security Engineer

Base-2 Solutions is seeking a Junior Security Engineer to support day-to-day security operations across enterprise and isolated environments. This on-site role is located in Bethesda, MD, where you will help drive vulnerability management, system hardening, continuous monitoring, and RMF/ATO support under the direction of senior security personnel.

Position Focus

• Provide hands-on support for security operations, including continuous monitoring and recurring security activities.
• Support vulnerability management and security configuration efforts across infrastructure systems.
• Assist with RMF/ATO documentation, evidence development, and compliance alignment.

Responsibilities

• Perform day-to-day security activities under senior security direction and escalate risks, technical issues, and blockers as appropriate.
• Support vulnerability management from identification through closure, including analysis, remediation, validation, and documentation.
• Conduct vulnerability scanning and analyze results using ACAS, Tenable/Nessus, or equivalent technologies.
• Coordinate with engineering teams across Windows, Linux, and network as well as desktop support to support remediation and security-related technical issues.
• Implement and validate DISA STIGs and approved security configuration baselines across infrastructure systems.
• Support recurring security activities such as audit log reviews, account reviews, vulnerability reviews, security control validation, and continuous monitoring.
• Support RMF/ATO activities, including security documentation, control evidence, Body of Evidence (BoE), and POA&Ms, aligned to NIST SP 800-53, ICD 503, and applicable security directives.
• Assist with reviewing system and configuration changes for potential security impact and document findings for review by senior security personnel and the ISSM.
• Support security efforts for isolated or restricted environments, including vulnerability scanning, logging, patching, hardening, and security monitoring.
• Review security logs and events using Splunk or equivalent SIEM/log-management technologies, escalating identified issues as needed.
• Help maintain security procedures, compliance evidence, and vulnerability remediation records, including tracking assigned findings through completion with status updates.
• Participate in security reviews, engineering meetings, and Technical Exchange Meetings (TEMs) as required.
• Research security vulnerabilities and remediation approaches, then share findings and recommendations with senior security personnel.
• Build technical knowledge across the environment and take on increased responsibility as experience and proficiency grow.

Required Qualifications

• Relevant experience meeting an applicable education/experience pathway in the equivalency section.
• Experience addressing application performance and latency problems related to security requirements across front, middle, and back end.
• Working experience with Windows Server 2016/2019, Active Directory, IIS, DNS, DHCP, Exchange, and DFS.
• Experience implementing security controls on common network services such as file, email, and Active Directory across multiple geographically dispersed sites.
• Experience with networking technologies and security assessment, including STIGs.
• Experience implementing and supporting enterprise system security and malware monitoring and prevention tools such as Splunk, McAfee HBSS, and ACAS.
• Strong troubleshooting skills with TCP/IP, internet security, and encryption, including data at rest and data in transit.
• Ability to produce clear and concise documents and diagrams covering networking and operational procedures and LAN/WAN topology using MS Visio, MS Project, MS Excel, and MS Word.
• US Citizenship required due to the nature of government contracts supported.
• At minimum, meet DoD 8570.11-IAT Level II certification requirements, including Security+ CE, CCNA-Security, GSEC, or SSCP, plus an appropriate computing environment (CE) certification.

Technologies

• ACAS, Tenable/Nessus, DISA STIGs
• NIST SP 800-53, ICD 503
• Splunk, SIEM, log-management technologies
• Windows Server 2016/2019, Active Directory, IIS, DNS, DHCP, Exchange, DFS
• McAfee HBSS
• TCP/IP, encryption, MS Visio, MS Project, MS Excel, MS Word
• Security+ CE, CCNA-Security, GSEC, SSCP
• DoD 8570.11-IAT Level II

Benefits

• Competitive fixed salary or hourly pay (based on experience, skills, location, and internal equity).
• Employee referral bonuses up to $10,000 per hired referral.
• Additional bonus opportunities for exceptional performance and contributions to business development and company growth (role-dependent).
• 100% company-paid medical premiums for employees and eligible dependents; choose from CareFirst, Kaiser, and UnitedHealthcare plan options including PPO, POS, HMO, and HSA-compatible plans.
• 100% company-paid dental premiums for employees and eligible dependents.
• 100% company-paid vision premiums for employees and eligible dependents.
• 100% company-paid premiums for short-term disability, long-term disability, AD&D, and life insurance up to $200,000.
• 401(k) with immediate vesting: 4% company match plus a 4% non-elective company contribution (8% total), with pre-tax and Roth options.
• Up to 20 days of flexible paid time off (PTO) and 11 paid floating holidays.
• Flexible work schedules, including flex time and compressed work periods (contract and project-dependent).

Education and Experience Equivalency

• Bachelor’s degree with at least 2 years of relevant experience.
• Additional years of relevant experience may be considered in lieu of a degree.

Preferred Qualifications

• CISSP certification
• CASP certification

Security Clearance

• Active Top Secret/SCI