> Markdown version of [/jobs/ext/2774619-information-systems-security-engineer](https://www.wearedevelopers.com/jobs/ext/2774619-information-systems-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Systems Security Engineer - **Company:** Base-2 Solutions, LLC - **Location:** Annapolis Junction, MD, United States - **Salary:** $10,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Amazon Web Services, Confluence, JIRA, Microsoft Azure, Bash Shell, Burp Suite, Unix, Cloud Computing Security, Cyber Security, Linux, Multi-Factor Authentication, Cryptographic Protocols, Push Technology, Hyper-V, Internet Protocol Security (IP SEC), Intrusion Detection Systems, Virtual Private Networks (VPN), Python (Programming Language), Kali Linux, McAfee VirusScan, Nmap, Public Key Infrastructure, Windows PowerShell, Systems Development Life Cycle, Secure Coding, Wireshark, Virtualization Technology, Transport Layer Security, Google Cloud, SARS Software Products, Firewalls (Computer Science), Metasploit, Nessus, Splunk, Servicenow, Vulnerability Analysis, Vmware - **Published:** September 7, 2026 - **Apply:** https://www.clearancejobs.com/jobs/9147790/information-systems-security-engineer ## About the Role * Experience with security frameworks and standards such as NIST SP 800-53, RMF, ICD 503, CNSS, DoD STIGs. * Experience with security tools such as ACAS, Nessus, Tenable, Splunk, Wireshark, HBSS, McAfee ePO. * Experience with security technologies including Firewalls, IDS/IPS, SIEMs, VPNs, PKI, Multi-Factor Authentication. * Experience with system security documentation: SSPs, POA&Ms, SARs, Security Control Traceability Matrix (SCTM). * Experience with Linux, Unix, Windows, and Virtualization technologies (VMware, Hyper-V). * Experience with cloud platforms such as AWS, Azure, Google Cloud with a focus on cloud security. * Experience with encryption protocols and technologies such as TLS/SSL, IPsec, VPN, PKI. * Experience with security testing tools: Nmap, Metasploit, Burp Suite, Kali Linux. * Scripting and automation experience: Python, PowerShell, Bash. * Knowledge of system development lifecycle (SDLC), software assurance, and secure coding practices. * Experience with collaboration and issue-tracking tools like JIRA, Confluence, ServiceNow. * Certifications such as CISSP, CAP, CEH, Security+, AWS Security Specialty, or equivalent. Preferred Qualifications * Not specified. Required Education and Experience Equivalency * None specified. Required Certifications * CISSP * CAP * CEH * Security+ * AWS Security Specialty * or equivalent Required Security Clearance * Active Top Secret/SCI with Full Scope Polygraph ## Description Base-2 Solutions is seeking a highly skilled and motivated Information Systems Security Engineer (ISSE) to join our team. Our ISSEs play a critical role in safeguarding cutting-edge systems that support national defense and mission-critical operations. We are looking for security professionals who bring expertise in system security design, risk management, and cybersecurity frameworks, as well as strong leadership qualities and an eagerness to tackle complex challenges. Our ideal candidate will demonstrate versatility, attention to detail, and a commitment to protecting sensitive information and systems as we continue to push technology forward., * Develops, implements, and maintains security solutions for complex systems to ensure confidentiality, integrity, and availability. * Conducts system security analysis, risk assessments, and vulnerability assessments to identify and mitigate risks. * Supports the development of security architecture and system security engineering artifacts based on NIST, DoD, and IC policies and guidelines. * Collaborates with system architects, software engineers, and network engineers to incorporate security requirements into system design. * Develops and maintains System Security Plans (SSPs), Security Assessment Reports (SARs), and related Risk Management Framework (RMF) documentation. * Performs continuous monitoring and ensures compliance with applicable security standards (NIST SP 800-53, ICD 503, CNSS, etc.). * Provides recommendations for improving system security posture and addresses security incidents as they arise. * Engages in security testing, evaluation, and certification & accreditation (C&A) activities. * Interfaces with government customers and stakeholders to effectively communicate technical information and security strategies. ## Related Videos - [Improving quality with Agentic AI with Rovo Dev and Xray](https://www.wearedevelopers.com/videos/2005-improving-quality-with-agentic-ai-with-rovo-dev-and-xray) - [WeAreDevelopers LIVE - Node and Package Security](https://www.wearedevelopers.com/videos/2138-wearedevelopers-live-node-and-package-security) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Collaboration Quantified: Lessons from Open Source Developer Networks](https://www.wearedevelopers.com/videos/1422-collaboration-quantified-lessons-from-open-source-developer-networks) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [The Time Paradox: Building Timezone-Safe Python/Django Applications](https://www.wearedevelopers.com/videos/1915-the-time-paradox-building-timezone-safe-python-django-applications) ## Related Articles - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)