Senior Information Security Officer (Top Secret/SCI)

Base-2 Solutions; Reston (VA); On-site; USD 140,000 - 170,000; Full time

Benefits offered by this job

Health insurance

Dental & Vision paid

401(k) retirement plan

Paid time off

Job summary

Base-2 Solutions is seeking an Information System Security Officer to work with application leads, system administrators, database administrators, developers, and testers to ensure assigned systems are security compliant and achieve or maintain Authority to Operate (ATO).

The role includes following the RMF process for full test, partial test, CONMON, and no test scenarios, updating Xacta documentation such as SSPs, SCTM, STPs, and POAMs, loading artifacts including STIG checklists and ACAS

Qualifications

• Bachelor's degree in CS/SE or related field required.
• 9+ years of relevant experience with a Bachelor's degree.
• Experience developing and enforcing security policies to ensure compliance.
• Strong RMF, risk management, and incident response background.

Responsibilities

• Work with application leads, system administrators, DBAs, developers, and testers to ensure system security compliance and ATO.
• Follow RMF process for full/partial testing, CONMON, and no test.
• Update Xacta documentation including SSPs, SCTM, STPs, and POAMs.
• Load artifacts such as STIG checklists and ACAS scans.
• Help implement STIGs and mitigate scan findings.
• Answer questions to ensure security-compliant development.
• Support security assessment events and respond to PAT, ISSMs, and SCAs.

Skills

RMF process

Risk assessment

Security compliance

Incident response

ATO processes

Security documentation

Education

Bachelor's degree in CS/related field

Master's degree in CS/related field

PhD with 5 years experience

Tools

Xacta

STIGs/ACAS

SSP/SCTM/STP/POAM

Job description

Base-2 Solutions is seeking an Information System Security Officer to work with application leads, system administrators, database administrators, developers, and testers to ensure assigned systems are security compliant and achieve or maintain Authority to Operate (ATO).

The role includes following the RMF process for full test, partial test, CONMON, and no test scenarios, updating Xacta documentation such as SSPs, SCTM, STPs, and POAMs, loading artifacts including STIG checklists and ACAS