Senior Information Security Architect & Risk Lead

Base-2 Solutions; Maryland; On-site; USD 140,000 - 190,000; Full time

Job summary

Base-2 Solutions is seeking a Senior Information Systems Security Officer responsible for safeguarding computer networks and systems to the highest standards, ensuring data security, integrity, and confidentiality.

The role emphasizes Risk Management Framework, vulnerability identification, and implementing secure architectures across multiple enclaves, with collaboration among system owners, admins, and developers to achieve and maintain ATO.

Qualifications

• Experience loading artifacts such as STIG checklists and ACAS scans.
• Experience implementing STIG checklists and mitigating scan findings.
• Experience supporting security assessment events and responding to questions from PAT team, ISSMs, and SCA.
• Experience ensuring systems are security compliant and achieve/maintain ATO.

Responsibilities

• Designs, develops, implements and/or integrates IA and security systems across multiple enclaves and data protection requirements.
• Analyzes architecture and system functionality for multiple technologies.
• Prepares and delivers technical reports and briefings.
• Has a complete understanding of Risk Management Framework and implements the process on program systems/networks.
• Performs system security assessments to identify vulnerabilities and mitigations.
• Assists architects and developers in implementing security functionality for enterprise solutions.
• Loads artifacts such as STIG checklists and ACAS scans.
• Supports security assessment events and responds to questions from PAT team and ISSMs.

Skills

STIGs & ACAS

Security assessments

IA / CND concepts

Cross-team collaboration

Education

Bachelor's degree + 14+ years

Master's degree + 12+ years

PhD + 10+ years

Tools

Xacta

Job description

Base-2 Solutions is seeking a Senior Information Systems Security Officer responsible for safeguarding computer networks and systems to the highest standards, ensuring data security, integrity, and confidentiality.

The role emphasizes Risk Management Framework, vulnerability identification, and implementing secure architectures across multiple enclaves, with collaboration among system owners, admins, and developers to achieve and maintain ATO.