Information Security Officer — RMF/ATO Lead

Talentify; Elkridge (MD); On-site; USD 120,000 - 150,000; Full time

Job summary

Base-2 Solutions seeks an Information System Security Officer to collaborate with application leads, system admins, developers, and testers to ensure security compliance and maintain Authority to Operate (ATO).

The role emphasizes RMF workflows, continuous monitoring, and remediation of vulnerabilities. Load and update Xacta artifacts (SSPs, SCTM, STPs, POAMs) and coordinate with PAT, ISSMs, and SCAs during assessments.

Qualifications

• Bachelor's degree in computer science, software engineering, or a related field.
• 9+ years of relevant experience with a Bachelor's degree.
• Experience developing and enforcing security policies to ensure compliance.
• Experience conducting risk assessments and identifying vulnerabilities.
• Experience in mitigation strategies and monitoring for security breaches.
• Responding to security incidents and performing root cause analysis.

Responsibilities

• Collaborate with stakeholders to ensure systems maintain ATO.
• Follow RMF process for full/partial tests, CONMON, and no test.
• Update Xacta docs: SSPs, SCTM, STPs, POAMs.
• Load artifacts such as STIG checklists and ACAS scans.
• Implement STIG checklists and mitigate findings.
• Support security assessment events and respond to PAT/ISSM/SCAs.

Skills

RMF process

Security monitoring

Incident response

Vulnerability assessment

Risk assessment

Policy development

Education

Bachelor's degree in Computer Science or related

Associates with 11 years experience

Master's with 7 years experience

PhD with 5 years experience

High School + 13 years experience

Tools

Xacta

STIG

ACAS

POAMs

Job description

Base-2 Solutions seeks an Information System Security Officer to collaborate with application leads, system admins, developers, and testers to ensure security compliance and maintain Authority to Operate (ATO).

The role emphasizes RMF workflows, continuous monitoring, and remediation of vulnerabilities. Load and update Xacta artifacts (SSPs, SCTM, STPs, POAMs) and coordinate with PAT, ISSMs, and SCAs during assessments.