Senior Information Security Officer — IA & Risk Leader

RPMGlobal; Norfolk (VA); Hybrid; USD 120,000 - 170,000; Full time

Job summary

Base-2 Solutions seeks a Senior Information Systems Security Officer to safeguard networks and data, ensuring confidentiality and integrity across multiple enclaves. You will lead IA program activities, analyze architectures, and guide attack scenario evaluations, risk management, and certification efforts to achieve ATO.

The role requires deep experience with STIG/ACAS, Xacta, and security assessments, collaborating with engineers, admins, and testers to maintain compliant systems and enforce

Qualifications

• Experience loading artifacts such as STIG checklists and ACAS scans.
• Experience helping to implement STIG checklists and mitigate scan findings.
• Experience supporting security assessment events and responding to questions from PAT team, ISSMs, and SCA.
• Experience working with application leads, sysadmins, DBAs, developers, and testers to ensure systems are security compliant and achieve/maintain ATO.

Responsibilities

• Designs, develops, implements and/or integrates IA and security systems with multiple enclaves.
• Analyzes architecture and system functionality for multiple technologies.
• Performs system installation, configuration, maintenance, patch management, and troubleshooting of IA/CND systems.
• Performs limited penetration testing and routine exploit analysis.
• Reviews C&A documentation and provides feedback on completeness and compliance.
• Recommends system-level solutions to resolve security requirements.
• Supports building security architectures and enforces trusted relations with external systems.

Skills

STIG checklists

ACAS scans

Security assessment events

ATO readiness

Xacta

Education

Bachelor's degree with 14+ years of experience

Master's degree with 12+ years of experience

PhD with 10+ years of experience

Tools

Xacta

Job description

Base-2 Solutions seeks a Senior Information Systems Security Officer to safeguard networks and data, ensuring confidentiality and integrity across multiple enclaves. You will lead IA program activities, analyze architectures, and guide attack scenario evaluations, risk management, and certification efforts to achieve ATO.

The role requires deep experience with STIG/ACAS, Xacta, and security assessments, collaborating with engineers, admins, and testers to maintain compliant systems and enforce