Senior Information System Security Officer

Base-2 Solutions; Reston (VA); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

401(k) with match

Paid time off

Job summary

Base-2 Solutions is seeking a Senior Information Systems Security Officer (ISSO) to safeguard networks and systems, ensuring data confidentiality, integrity, and security at the highest standards. The role requires hands-on involvement with RMF processes, vulnerability management, and security architecture across multiple enclaves.

The candidate will collaborate with application leads, sysadmins, DBAs, developers, and testers to maintain ATO, load STIG/ACAS artifacts, and guide security

Qualifications

• Bachelor's degree with 14+ years of experience or higher (or equivalent).
• Experience implementing STIG checklists and mitigating findings.
• Experience supporting security assessment events and coordinating with ISSMs and SCA.

Responsibilities

• Designs, develops, and integrates IA and security systems across multiple enclaves.
• Performs risk analysis and vulnerability assessments to meet IA standards.
• Prepares technical reports and briefings on security posture and findings.
• Ensures systems achieve and maintain ATO and secure architecture across programs.

Skills

Risk management

Security architecture

Vulnerability assessment

Technical reporting

Cross-functional collaboration

Education

Bachelor's degree with 14+ years

Master's degree with 12+ years

PhD with 10+ years

Tools

Xacta

ACAS

STIG

Job description

• Required Security Clearance: Top Secret/SCI with CI Polygraph
• Location: Reston, VA
• Work Type: On-Site
• Shift: First

• Requisition ID: 4506
• Standard Title:
• Required Security Clearance: Top Secret/SCI with CI Polygraph
• Location: Reston, VA
• Work Type: On-Site
• Shift: First
• Referral Eligibility: Eligible
• U.S. Citizenship Required? Yes

Position Summary

Base-2 Solutions is seeking a Senior Information Systems Security Officer responsible for safeguarding computer networks and systems to ensure data security, integrity, and confidentiality at the highest standards.

Essential Duties And Responsibilities

• Designs, develops, implements and/or integrates IA and security systems and system components including those for networking, computing, and enclave environments with multiple enclaves and differing data protection/classification requirements.
• Analyzes architecture and system functionality for multiple technologies.
• Contributes to the development and evaluation of attack scenarios.
• Prepares and delivers technical reports and briefings.
• Has a complete understanding of Risk Management Framework and implements the process on program systems/networks.
• Performs or reviews technical security assessments of computing environments to identify vulnerabilities, non-compliance with IA standards and regulations, and recommends mitigation strategies.
• Validates and verifies system security requirements definitions and analysis and establishes system security designs.
• Assists architects and systems developers in identifying and implementing appropriate information security functionality to ensure uniform application security policy and enterprise solutions.
• Supports building security architectures and enforces trusted relations among external systems and architectures.
• Assesses and mitigates system security threats/risks throughout the program life cycle.
• Contributes to security planning, assessment, risk analysis, risk management, certification, and awareness activities for system and networking operations.
• Reviews certification and accreditation (C&A) documentation, providing feedback on completeness and compliance.
• Performs system installation, configuration, maintenance, account maintenance, signature maintenance, patch management, and troubleshooting of operational IA and CND systems.
• Performs limited penetration testing and routine exploit analysis.
• Performs system or network designs encompassing multiple enclaves with differing data protection/classification requirements.
• Recommends system-level solutions to resolve security requirements.
• Supports enforcement of design and implementation of trusted relationships among external systems and architectures.
• Works with application leads, sysadmins, DBAs, developers, and testers to ensure assigned systems are security compliant and achieve/maintain ATO.
• Loads artifacts such as STIG checklists and ACAS scans.
• Helps implement STIG checklists and mitigate scan findings.
• Supports security assessment events and responds to questions from PAT team, ISSMs, and SCA.

Required Qualifications

• Experience loading artifacts such as STIG checklists and ACAS scans.
• Experience helping to implement STIG checklists and mitigate scan findings.
• Experience supporting security assessment events and responding to questions from PAT team, ISSMs, and SCA.
• Experience working with application leads, sysadmins, DBAs, developers, and testers to ensure systems are security compliant and achieve/maintain ATO.

Preferred Qualifications

• Experience working with Xacta.

Required Education and Experience Equivalency

• Bachelor's degree with 14+ years of experience.
• Master's degree with 12+ years of experience.
• PhD with 10+ years of experience.

Required Certifications

• None specified.

Required Security Clearance

• Active Top Secret/SCI with CI Polygraph

Pay & Benefit Highlights

Compensation

• Competitive fixed salary or hourly pay (based on experience, skills, location, and internal equity).
• Employee referral bonuses up to $10,000 per hired referral.
• Additional bonus opportunities for exceptional performance and contributions to business development and company growth (role-dependent).

Health

• 100% company-paid medical premiums for employees and eligible dependents.
• Choose from multiple plan options with CareFirst, Kaiser, and UnitedHealthcare, including PPO, POS, HMO, and HSA-compatible plans.
• 100% company-paid dental premiums for employees and eligible dependents.
• 100% company-paid vision premiums for employees and eligible dependents.

Income Protection

• 100% company-paid premiums for short-term disability.
• 100% company-paid premiums for long-term disability.
• 100% company-paid premiums for accidental death & dismemberment (AD&D).
• 100% company-paid premiums for life insurance up to $200,000.

Retirement

• 401(k) with immediate vesting: 4% company match plus a 4% non-elective company contribution (8% total).
• 401(k) pre-tax and Roth options.

Leave

• Up to 20 days of flexible paid time off (PTO).
• 11 paid floating holidays.

Work-Life Balance

• Flexible work schedules, including flex time and compressed work periods (contract and project-dependent).