ISSO: Federal Cybersecurity & RMF Expert

Base-2 Solutions, LLC; Maryland; On-site; USD 120,000 - 160,000; Full time

Job summary

Base-2 Solutions, LLC is seeking an Information Systems Security Officer (ISSO) to ensure the security posture of mission-critical systems, support compliance with RMF and NIST standards, and coordinate with government stakeholders. The role requires meticulous documentation, risk assessment, and collaboration with ISSEs and program managers.

The ISSO will maintain SSPs/SARs/POA&Ms, oversee authorization activities, and drive security initiatives, incident response, and continuous monitoring

Qualifications

• Experience with federal security regulations and RMF/DIAC compliance.
• Experience creating and maintaining SSPs, SARs, POA&Ms, and monitoring plans.
• Experience coordinating security assessments and audits.
• Ability to perform risk assessments and recommend mitigations.
• Knowledge of system authorization under RMF.
• Ability to monitor, report, and remediate security posture and incidents.
• Collaboration with ISSEs, admins, and program managers to embed security requirements.
• Security awareness training delivery and enforcing best practices.
• Liaison with government customers for timely security updates.

Responsibilities

• Ensure system compliance with federal, DoD, and IC cybersecurity regulations and standards, including NIST, ICD 503, CNSS, and RMF.
• Maintain and update security documentation, including SSPs, SARs, POA&Ms, and Continuous Monitoring Plans.
• Coordinate and support security assessments, audits, and inspections by internal and external stakeholders.
• Conduct risk assessments and vulnerability analysis, providing recommendations for mitigating identified risks.
• Facilitate and oversee system authorization activities in accordance with the RMF process.
• Monitor and report on system security posture, incident response, and remediation efforts.
• Collaborate with Information Systems Security Engineers (ISSEs), system administrators, and program managers to integrate security requirements into system lifecycle.
• Provide security awareness training to system users and enforce proper security practices.
• Act as a liaison between the organization and government customers, ensuring timely communication of security updates and issues.

Skills

NIST SP 800-53

RMF

ICD 503

CNSS

DoD STIGs

FISMA

FedRAMP

ACAS

Nessus

Splunk

HBSS

eMASS

Xacta

Firewalls

SIEMs

VPNs

IDS/IPS

DLP

PKI

MFA

Windows

Linux

Unix

macOS

AWS

Azure

GCP

JIRA

Confluence

ServiceNow

Education

Bachelors or equivalent in a related field

Tools

ACAS

Nessus

Splunk

HBSS

eMASS

Xacta

Job description

Base-2 Solutions, LLC is seeking an Information Systems Security Officer (ISSO) to ensure the security posture of mission-critical systems, support compliance with RMF and NIST standards, and coordinate with government stakeholders. The role requires meticulous documentation, risk assessment, and collaboration with ISSEs and program managers.

The ISSO will maintain SSPs/SARs/POA&Ms, oversee authorization activities, and drive security initiatives, incident response, and continuous monitoring