Senior Information Security Officer - RMF & ATO Expert

Base-2 Solutions; Norfolk (VA); On-site; USD 140,000 - 200,000; Full time

Benefits offered by this job

Medical coverage

Dental coverage

Vision coverage

Disability insurance

Life insurance

401(k) plan with match

PTO and holidays

Flexible work schedules

Job summary

Base-2 Solutions seeks a Senior Information System Security Officer to ensure systems are security compliant and maintain Authority to Operate (ATO). You will follow the RMF process for full, partial, continuous monitoring, and no-test scenarios, updating SSPs, SCTMs, STPs, and POAMs in XACTA.

Load STIGs and ACAS scans, help mitigate findings, and coordinate with ST&E, ISSMs, and SCAs. You will collaborate with application leads, DBAs, developers, and testers to embed security into the

Qualifications

• Bachelor's degree in computer science, software engineering, or field applicable to position.
• 19+ years of relevant experience with Bachelor's degree.
• Experience developing and enforcing security policies for regulatory compliance.
• Proven risk assessment and vulnerability identification experience.
• Experience implementing mitigation strategies to reduce security risks.

Responsibilities

• Work with application leads, admins, developers, and testers to ensure security compliance and ATO.
• Follow RMF process for full/partial/CONMON/no test scenarios.
• Update XACTA documentation (SSP, SCTM, STP, POAM).
• Load artifacts like STIG checklists and ACAS scans.
• Assist in STIG implementation and mitigate scan findings.
• Support security assessment events and respond to ST&E questions.

Skills

RMF process

XACTA docs

STIG checklists

ACAS scans

Incident response

Vulnerability management

Education

Bachelor's degree in CS/SE

Experience equivalency allowed

Tools

XACTA

ACAS

Job description

Base-2 Solutions seeks a Senior Information System Security Officer to ensure systems are security compliant and maintain Authority to Operate (ATO). You will follow the RMF process for full, partial, continuous monitoring, and no-test scenarios, updating SSPs, SCTMs, STPs, and POAMs in XACTA.

Load STIGs and ACAS scans, help mitigate findings, and coordinate with ST&E, ISSMs, and SCAs. You will collaborate with application leads, DBAs, developers, and testers to embed security into the