Senior Information Security Officer – Top Secret/SCI CI Poly

Base-2 Solutions; Washington (District of Columbia); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Company-paid health premiums

Company-paid dental premiums

Company-paid vision premiums

Life insurance 100% paid by employer

401(k) with company match

Job summary

Base-2 Solutions in Washington, DC seeks a Senior Information System Security Officer to ensure systems are secure and maintain Authority to Operate. You will collaborate with application leads, system admins, developers, and testers to implement RMF, load Xacta artifacts, and support ST&E activities.

The role requires a strong background in RMF, security assessments, vulnerability management, and incident response, with extensive experience coordinating with ISSMs and SCAs.

Qualifications

• Bachelor's degree in computer science, software engineering, or a field applicable to the position.
• 19 or more years of relevant experience required with a Bachelor's degree.
• Experience developing, implementing, and enforcing security policies and procedures.
• Proven track record in risk assessments and vulnerability identification.
• Experience in monitoring systems and responding to security incidents.

Responsibilities

• Ensure systems are security compliant and maintain ATO.
• Follow RMF for full/partial testing and continuous monitoring.
• Update Xacta documentation (SSP, SCTM, STP, POAM).
• Load artifacts such as STIG checklists and ACAS scans.
• Assist ST&E team, ISSMs, and SCAs with security questions.
• Support security assessment events and mitigate findings.

Skills

RMF process

Xacta experience

STIG implementation

ACAS scans

POAM management

Education

Bachelor's degree in computer science or related field

Tools

Xacta

STIG checklists

ACAS

SCTM/STP/POAM artifacts

Job description

Base-2 Solutions in Washington, DC seeks a Senior Information System Security Officer to ensure systems are secure and maintain Authority to Operate. You will collaborate with application leads, system admins, developers, and testers to implement RMF, load Xacta artifacts, and support ST&E activities.

The role requires a strong background in RMF, security assessments, vulnerability management, and incident response, with extensive experience coordinating with ISSMs and SCAs.