> Markdown version of [/jobs/ext/2771329-cyber-security-engineer-3](https://www.wearedevelopers.com/jobs/ext/2771329-cyber-security-engineer-3). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cyber Security Engineer 3 - **Company:** Base-2 Solutions, LLC - **Location:** Bethesda, MD, United States - **Experience:** Expert - **Salary:** $10,000.0 - **Contract:** Permanent contract - **Skills:** Xacta, Java (Programming Language), Active Directory, Agile Methodology, Confluence, JIRA, Bash Shell, Big Data, Cyber Security, Databases, Continuous Integration, Middleware, Information Systems Security Architecture Professional, Information Systems Security Engineering Professional, Python (Programming Language), OAuth, OpenID, Open Web Application Security, Windows PowerShell, Systems Development Life Cycle, Fortify (Software), Cloudera, Security Content Automation Protocol, Software Engineering, SonarQube, Transmission Control Protocol (TCP), Scripting, SARS Software Products, ReactJS, Gitlab, Kubernetes, Rancher, Web Technologies, Hardware Infrastructure, Vulnerability Analysis, Programming Languages - **Published:** September 7, 2026 - **Apply:** https://www.clearancejobs.com/jobs/9147745/cyber-security-engineer-3 ## About the Role * Active TS/SCI with ability to obtain a CI Polygraph. * Bachelor's degree with a minimum of six years of experience in the category field. Three additional years of experience may be substituted for the bachelor's degree. * At least one DoD 8570.01-M IASAE Level II certification: CISSP, CISSP-ISSAP, CISSP-ISSEP, CSSLP, or CASP+ CE. * Developer experience preferred in at least one scripting or programming language. * Experience reviewing cybersecurity vulnerabilities for risk and relevance and building mitigation/remediation plans across systems, network, application, and database vulnerabilities. * Ability to architect, design, troubleshoot, maintain, and deploy vulnerability scanning solutions such as OWASP, Fortify, SonarQube, and Tenable. * Experience with XACTA, eMASS, or similar tools. * Strong understanding of Microsoft Windows and Linux/UNIX operating systems. * Experience with middleware/web technologies, databases, TCP/IP networking, and CI/CD platforms. * Familiarity with NIST 800-171, 800-172, NIST SSDF, CMMC, and CNSSI 1253. * Experience supporting DoD/IC systems through the RMF+ process. Preferred Qualifications * Software development experience with Python, Java, or React. * Experience successfully achieving ATO under RMF+. * Experience with big data applications. * Experience with GitLab, Jira, and Confluence. * Experience in Agile environments. * Experience with OIDC or OAuth2. * Experience with Kubernetes, Rancher, Strimzi, Cloudera, Active Directory, and scripting languages such as Bash, Python, or PowerShell. Required Education and Experience Equivalency * High School Diploma/GED with 9 years of experience. * Associates Degree with 9 years of experience. * Bachelors' Degree with 6 years of experience. * Masters' Degree with 6 years of experience. * PhD with 6 years of experience. Required Certifications * One DoD 8570.01-M IASAE Level II certification: CISSP, CISSP-ISSAP, CISSP-ISSEP, CSSLP, or CASP+ CE. Required Security Clearance * Active TS/SCI with ability to obtain a CI Polygraph. ## Description Support multiple task orders under the DOMEX Technology Platform contract supporting NMEC by designing, developing, and implementing secure systems in on-premises infrastructure and integrating security across the system lifecycle., * Support the secure architecture, design, and implementation of DoD systems in accordance with DoDI 8510.01, NIST SP 800-53, and other DoD security guidance. * Lead integration of RMF activities into the SDLC, including selection, implementation, and validation of security controls. * Develop and maintain SSPs, SARs, risk assessments, and POA&Ms. * Apply STIGs and validate compliance using SCAP, STIG Viewer, and ACAS. * Maintain scanning infrastructure and analyze vulnerabilities for mitigation or risk acceptance. * Support system authorization, incident response, forensics analysis, and security automation efforts. ## Related Videos - [Improving quality with Agentic AI with Rovo Dev and Xray](https://www.wearedevelopers.com/videos/2005-improving-quality-with-agentic-ai-with-rovo-dev-and-xray) - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Collaboration Quantified: Lessons from Open Source Developer Networks](https://www.wearedevelopers.com/videos/1422-collaboration-quantified-lessons-from-open-source-developer-networks) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [What’s the Difference between a Junior, Mid, and Senior Developer?](https://www.wearedevelopers.com/magazine/238-what-s-the-difference-between-a-junior-mid-and-senior-developer) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Best Coding Boot Camps in Germany](https://www.wearedevelopers.com/magazine/237-best-coding-boot-camps-in-germany) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)