Lead ISSO – TS/SCI with CI Poly

Base-2 Solutions; Norfolk (VA); On-site; USD 110,000 - 160,000; Full time

Benefits offered by this job

Health insurance (employee and depend.

Dental premiums

Vision premiums

401(k) with company match

PTO and floating holidays

Flexible work options

Job summary

Base-2 Solutions is seeking an Information System Security Officer to partner with application leads, DBAs, developers and testers to ensure security compliance and maintain Authority to Operate (ATO). The role involves RMF-based testing, continuous monitoring, and updating Xacta documentation including SSPs, SCTMs, STPs and POAMs.

The candidate will load STIG checklists, mitigate scan findings and support security assessment events by addressing questions from the ST&E team, ISSMs, and SCAs.

Qualifications

• Bachelor's degree or equivalent in a relevant field.
• Experience developing and enforcing security policies to ensure regulatory compliance.

Responsibilities

• Ensure systems are security compliant and achieve/maintain ATO.
• Follow RMF for full/partial CONMON and no test scenarios.
• Update SSPs, SCTMs, STPs, and POAMs in Xacta.
• Load STIGs and ACAS scans and mitigate findings.
• Support security assessment events and respond to ST&E questions.

Skills

RMF process

Risk assessments

Security monitoring

Incident response

Vulnerability management

Xacta documentation

STIG/ACAS experience

Security compliance

Communication with ISSMs/SCAs

Education

Bachelor's degree in computer science, software engineering, or related field

High School + 13 years experience equivalency

Associate's degree + 11 years experience equivalency

Master's degree + 7 years experience equivalency

PhD + 5 years experience equivalency

Tools

Xacta

STIG checklists

ACAS scans

Job description

Base-2 Solutions is seeking an Information System Security Officer to partner with application leads, DBAs, developers and testers to ensure security compliance and maintain Authority to Operate (ATO). The role involves RMF-based testing, continuous monitoring, and updating Xacta documentation including SSPs, SCTMs, STPs and POAMs.

The candidate will load STIG checklists, mitigate scan findings and support security assessment events by addressing questions from the ST&E team, ISSMs, and SCAs.