Senior Information System Security Officer (ISSO) – RMF & ATO

Base-2 Solutions; Elkridge (MD); On-site; USD 110,000 - 165,000; Full time

Benefits offered by this job

Medical premiums paid

Dental premiums paid

Vision premiums paid

Disability & AD&D insurance

Life insurance

401(k) with company match

Flexible PTO

Job summary

Base-2 Solutions is seeking an Information System Security Officer to work with application leads, system admins, DBAs, developers, and testers to ensure security compliance and achieve or maintain Authority to Operate (ATO).

The role follows the RMF process for full/partial test, continuous monitoring, and no-test scenarios, updating SSPs, SCTM, STPs, and POAMs, loading STIGs and ACAS scans, and assisting with security assessments and ST&E teams.

Qualifications

• Experience developing, implementing, and enforcing security policies and procedures.
• Proven track record in risk assessments and vulnerability identification.
• Experience implementing mitigation strategies to reduce risk.
• Strong background monitoring networks for security breaches.
• Proven incident response, root cause analysis, and corrective actions.

Responsibilities

• Collaborate with leads and admins to ensure systems meet security requirements and achieve ATO.
• Follow RMF for full/partial test, CONMON, or no test scenarios.
• Update XACTA docs: SSPs, SCTM, STPs, POAMs.
• Load STIG checklists and ACAS scans and mitigate findings.
• Support security assessment events and respond to questions from ST&E, ISSMs, and SCAs.

Skills

Security policies

Risk assessments

Mitigation strategies

Monitoring & detection

Incident response

Regulatory compliance

Education

Bachelor's degree in CS/SE

High School + 13 years experience

Associates + 11 years experience

Master's + 7 years experience

PhD + 5 years experience

Job description

Base-2 Solutions is seeking an Information System Security Officer to work with application leads, system admins, DBAs, developers, and testers to ensure security compliance and achieve or maintain Authority to Operate (ATO).

The role follows the RMF process for full/partial test, continuous monitoring, and no-test scenarios, updating SSPs, SCTM, STPs, and POAMs, loading STIGs and ACAS scans, and assisting with security assessments and ST&E teams.