Senior Information Security Officer - Risk & Architecture

Base-2 Solutions, LLC; Washington (District of Columbia); On-site; USD 170,000 - 210,000; Full time

Job summary

Base-2 Solutions, LLC seeks a Senior Information Systems Security Officer to safeguard networks and systems to the highest standards in the Washington, DC area.

The role emphasizes RMF implementation, security assessments, and vulnerability mitigation across multiple enclaves; you will produce technical briefings, support C&A activities, and coordinate with ISSMs, PAT, developers, and admins to ensure ATO and strong data confidentiality.

Qualifications

• Experience loading artifacts such as STIG checklists and ACAS scans.
• Experience helping to implement STIG checklists and mitigate scan findings.
• Experience supporting security assessment events and responding to questions from PAT team, ISSMs, and SCA.
• Experience working with application leads, sysadmins, DBAs, developers, and testers to ensure systems are security compliant and achieve/maintain ATO.

Responsibilities

• Designs, develops, implements IA and security systems for multiple enclaves.
• Analyzes architecture and system functionality for multiple technologies.
• Contributes to the development and evaluation of attack scenarios.
• Prepares and delivers technical reports and briefings.
• Has a complete understanding of RMF and implements the process on program systems/networks.
• Performs or reviews security assessments to identify vulnerabilities and compliance gaps.

Skills

IA/CND

RMF

Vulnerability assessment

Risk management

Policy compliance

Technical communication

Education

Bachelor’s degree with 14 years of experience

Master’s degree with 12 years of experience

PhD with 10 years of experience

Tools

Xacta

STIG checklists

ACAS scans

Job description

Base-2 Solutions, LLC seeks a Senior Information Systems Security Officer to safeguard networks and systems to the highest standards in the Washington, DC area.

The role emphasizes RMF implementation, security assessments, and vulnerability mitigation across multiple enclaves; you will produce technical briefings, support C&A activities, and coordinate with ISSMs, PAT, developers, and admins to ensure ATO and strong data confidentiality.