ISSO: RMF/ATO Security & Compliance Lead

Base-2 Solutions, LLC.; Annapolis (MD); Sur place; USD 110 000 - 165 000; Plein temps

Résumé du poste

Base-2 Solutions in Annapolis, MD seeks an Information System Security Officer to collaborate with application leads, system administrators, developers, and testers to ensure security compliance and achieve or maintain Authority to Operate (ATO).

You will follow RMF processes for full, partial, and no test scenarios, update Xacta documentation (SSPs, SCTMs, STPs, POAMs), load STIGs and ACAS scans, implement mitigations, and support security assessments and inquiries from PAT, ISSMs, and SCAs.

Qualifications

• Bachelor's degree or equivalent required with security focus.
• Experience developing and enforcing security policies and procedures.
• Proven track record in risk assessments and vulnerability management.
• Strong incident response and corrective action history.

Responsabilités

• Collaborate with application leads, sysadmins, DBAs, developers and testers to ensure security and ATO.
• Follow RMF for full test, partial test, CONMON and no test scenarios.
• Update Xacta documentation (SSPs, SCTMs, STPs, POAMs).
• Load artifacts including STIG checklists and ACAS scans and apply mitigations.
• Support security assessment events and respond to PAT/ISSM/SCA inquiries.

Connaissances

RMF expertise

Security policy development

Risk assessment

Incident response

Systems monitoring

Vulnerability remediation

Communication with security teams

Formation

Bachelor's degree in computer science/software engineering or related field

High School + 13 years experience (equivalency)

Associates + 11 years experience (equivalency)

Master's + 7 years experience (equivalency)

PhD + 5 years experience (equivalency)

Description du poste

Base-2 Solutions in Annapolis, MD seeks an Information System Security Officer to collaborate with application leads, system administrators, developers, and testers to ensure security compliance and achieve or maintain Authority to Operate (ATO).

You will follow RMF processes for full, partial, and no test scenarios, update Xacta documentation (SSPs, SCTMs, STPs, POAMs), load STIGs and ACAS scans, implement mitigations, and support security assessments and inquiries from PAT, ISSMs, and SCAs.