Senior Information System Security Officer RMF/ATO Champion

RPMGlobal; Elkridge, Northern (MD, KY); Hybrid; USD 110,000 - 170,000; Full time

Job summary

Base-2 Solutions is seeking an Information System Security Officer to ensure security compliance across applications, systems, and testers, maintaining Authority to Operate (ATO). The role emphasizes RMF-driven testing, continuous monitoring, and updating Xacta artifacts such as SSPs, SCTMs, STPs, and POAMs.

The ideal candidate has a Bachelor's degree in CS/SE or related field and 9+ years of relevant experience, with a proven record in risk assessments, mitigation, and incident response, plus

Qualifications

• Bachelor's degree in computer science, software engineering, or a field applicable to the position required.
• 9 or more years of relevant experience required with a Bachelor's degree.
• Demonstrated experience in developing, implementing, and enforcing security policies, standards, and procedures to ensure regulatory compliance and protect organizational information assets.
• Proven track record in conducting risk assessments and identifying vulnerabilities in systems, networks, and applications.
• Experience in developing and overseeing implementation of mitigation strategies to reduce security risks.
• Strong background in monitoring systems and networks for security breaches and suspicious activity.
• Successful history of responding to security incidents, investigating root causes, and implementing corrective actions.

Responsibilities

• Work with application leads, system administrators, database administrators, developers, and testers to ensure assigned systems are security compliant and achieve or maintain ATO.
• Follow the RMF process for full test, partial test, continuous monitoring (CONMON), and no test scenarios.
• Update Xacta documentation including SSPs, SCTM, STPs, and POAMs.
• Load artifacts such as STIG checklists and ACAS scans.
• Help implement STIG checklists and mitigate scan findings.
• Answer questions to ensure systems are developed with security compliance built in.
• Support security assessment events and respond to all questions from the PAT team, ISSMs, and SCAs.

Skills

RMF process

Security policies

Risk assessments

Incident response

ACAS/STIG

Education

Bachelor's degree in computer science, software engineering, or related field

High School with 13 years of experience

Associate's degree with 11 years of experience

Bachelor's with 9 years experience

Master's with 7 years experience

PhD with 5 years experience

Job description

Base-2 Solutions is seeking an Information System Security Officer to ensure security compliance across applications, systems, and testers, maintaining Authority to Operate (ATO). The role emphasizes RMF-driven testing, continuous monitoring, and updating Xacta artifacts such as SSPs, SCTMs, STPs, and POAMs.

The ideal candidate has a Bachelor's degree in CS/SE or related field and 9+ years of relevant experience, with a proven record in risk assessments, mitigation, and incident response, plus