ISSO: TS/SCI w/ CI Poly – ATO & RMF On-Site

Base-2 Solutions; Norfolk (VA); On-site; USD 110,000 - 160,000; Full time

Benefits offered by this job

Health insurance

401(k) plan

Paid time off

Referral bonuses

Job summary

Base-2 Solutions is seeking an Information System Security Officer in Norfolk, VA to ensure security compliance and achieve Authority to Operate (ATO) by applying RMF processes. You will collaborate with application leads, system admins, database admins, developers and testers to maintain secure, compliant systems.

The role focuses on updating SSPs/SCTMs/STPs/POAMs, loading STIGs and ACAS scans, and mitigating findings while coordinating with PAT teams, ISSMs and SCAs.

Qualifications

• Experience implementing RMF for systems to achieve or maintain ATO.

Responsibilities

• Work with application leads, system administrators, database administrators, developers, and testers to ensure systems are security compliant and achieve or maintain ATO.
• Follow the RMF process for full test, partial test, CONMON, and no test.
• Update Xacta documentation including SSPs, SCTM, STPs, and POAMs.
• Load artifacts such as STIG checklists and ACAS scans.
• Help implement STIG checklists and mitigate scan findings.
• Answer questions to ensure systems are developed with security compliance built in.
• Support security assessment events and respond to all questions from PAT team, ISSMs, and SCAs.

Skills

RMF process

ATO

Xacta

STIG

ACAS

SSP

SCTM

POAM

risk assessment

security policy

Education

Bachelor's degree in computer science / software engineering or related field

Tools

Xacta

STIG

ACAS

SSP

POAM

Job description

Base-2 Solutions is seeking an Information System Security Officer in Norfolk, VA to ensure security compliance and achieve Authority to Operate (ATO) by applying RMF processes. You will collaborate with application leads, system admins, database admins, developers and testers to maintain secure, compliant systems.

The role focuses on updating SSPs/SCTMs/STPs/POAMs, loading STIGs and ACAS scans, and mitigating findings while coordinating with PAT teams, ISSMs and SCAs.