InfoSec Officer (TS/SCI CI Poly) — ATO & RMF Expert

Base-2 Solutions; Norfolk (VA); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Salary up to market rate + bonuses

Company-paid health/dental/vision

401(k) with match

Paid time off

Relocation assistance

Job summary

Base-2 Solutions seeks an Information System Security Officer to collaborate with application leads, system admins, DBAs, developers and testers to ensure security compliant systems achieve or maintain Authority to Operate (ATO). The role follows the RMF process for full test, partial test, CONMON, and no test scenarios, updating Xacta SSPs, SCTMs, STPs, and POAMs.

The candidate will load STIG checklists and ACAS scans, assist in implementing STIGs, mitigate scan findings, and support security

Qualifications

• Bachelor's degree in computer science, software engineering, or related field.
• 9+ years of relevant experience with a Bachelor's degree.
• Equivalent experience may be considered in lieu of degree.
• Experience developing, implementing, and enforcing security policies and procedures.

Responsibilities

• Work with cross-functional teams to ensure systems are security compliant and maintain ATO.
• Follow RMF process for various testing scenarios and continuous monitoring.
• Update SSPs, SCTMs, STPs, and POAMs in Xacta.
• Load artifacts like STIG checklists and ACAS scans and mitigate findings.
• Support security assessment events by responding to ST&E team, ISSMs, and SCAs questions.

Skills

RMF processes

Xacta documentation

STIG checklists

ACAS scans

Vulnerability mitigation

Security incident response

Education

Bachelor's degree in CS/SE or related field

9+ years of relevant experience with Bachelor's

Master's or PhD with experience

Tools

Xacta

STIG checklists

ACAS

Job description

Base-2 Solutions seeks an Information System Security Officer to collaborate with application leads, system admins, DBAs, developers and testers to ensure security compliant systems achieve or maintain Authority to Operate (ATO). The role follows the RMF process for full test, partial test, CONMON, and no test scenarios, updating Xacta SSPs, SCTMs, STPs, and POAMs.

The candidate will load STIG checklists and ACAS scans, assist in implementing STIGs, mitigate scan findings, and support security