Senior Information Systems Security Officer (ISSO)

Base-2 Solutions, LLC.; Washington (District of Columbia); On-site; USD 140,000 - 210,000; Full time

Job summary

Base-2 Solutions, LLC. seeks a Senior Information Systems Security Officer (ISSO) in the Washington, DC area to shape and enhance cybersecurity initiatives across programs. You will lead security assessments, drive ATO activities, and ensure compliance with NIST guidelines while coordinating with ISSMs, AO, and development teams.

The role requires active TS/SCI with CI Poly, U.S. citizenship, and hands-on experience with XACTA, RMF processes, and security artifacts (SSPs, POA&Ms).

Qualifications

• Active Security+ or equivalent IAT II/III cert
• Experience with XACTA and RMF, including IATT/ATO
• Experience building and maintaining security artifacts (SSPs, SAPs, POA&M)
• Experience assessing IT architectures for security compliance (e.g., ICD 503)
• Strong ability to coordinate with ISSMs, ISSEs, owners, and AO

Responsibilities

• Conduct technical security assessments and contribute to the security Systems.
• Ensure system security compliance, manage risks, and support certification activities through the program life cycle.
• Collaborate with application leads, sysadmins, dbas, developers and testers to ensure security compliance and ATO.
• Answer questions to ensure systems are developed with security compliance built in.
• Support security assessment events and respond to questions from ISSMs and SCAs.
• Develop and maintain SSPs, POA&Ms, and security documentation using XACTA.
• Drive IATT and ATO efforts, coordinating with stakeholders, cyber, and AO.
• Implement and validate NIST 800-53 controls in cloud-native DPaaS environments.
• Apply Zero Trust principles to secure data services, including identity, segmentation, and flow control.

Skills

Security+ or IAT II/III cert

Cybersecurity initiative leadership

Stakeholder communication

Education

Bachelor's degree substitution rules (4 years) for BA/BS; Master for 6 years

Tools

XACTA

RMF process

Splunk

Job description

Position Summary

As a Senior Level Information Systems Security Officer (ISSO) at Base-2 Solutions you will play a pivotal role in shaping and enhancing cybersecurity initiatives.

Essential Duties and Responsibilities

• Conduct technical security assessments and contribute to the security systems.
• Ensure system security compliance, manage risks, and support certification activities throughout the program life cycle.
• Work with the application leads, sysadmins, dbas, developers and testers to ensure the assigned systems are security compliant and achieve/maintain ATO.
• Answer questions to ensure systems are developed with security compliance built in.
• Support security assessment events and respond to all questions from ISSMs and SCAs
• Develop and maintain SSPs, POA&M, and other required security documentation using XACTA.
• Drive IATT and ATO efforts, coordinating with stakeholders, cyber, and Authorizing Official (AO).
• Implement and validate NIST 800-53 controls in cloud-native DPaaS environments.
• Apply Zero Trust principles to secure data services, including identity, segmentation, and flow control.

Required Qualifications

• Security+ or other IAT II/III level certification that is currently active.
• Proficiency with XACTA and RMF process, including managing IATT and ATO processes.
• Proficiency with Splunk.
• Experience conducting assessments of existing IT architecture for compliance with security requirements from applicable security frameworks (such as ICD 503).
• Experience with implementing and maintaining system security documentation, including SSPs, SAPs, POA&M, and security assessment artifacts, coordinating closely with ISSMs, ISSEs, system owners, and authorizing officials.

Preferred Qualifications

• Prior Information System Security Officer or Information System Security Engineer experience
• Proven experience leading cybersecurity initiatives for significant programs, showcasing a comprehensive understanding of large-scale program requirements.
• Demonstrated success in team management, highlighting the ability to effectively guide and coordinate cybersecurity professionals.
• Strong background in communication, with a track record of effectively engaging with customer, program leads, leadership teams, and engineers to convey complex cybersecurity concepts and strategies.

Required Education and Experience Equivalency

• 18 Years of experience in Security, Cyber, or Systems Engineering roles or a highly related field of work with similar scope and responsibilities.
• A bachelor's degree may be substituted for 4 years of experience and a master's degree may be substituted for 6 years of experience.

Required Security Clearance

• Active Top Secret/SCI with CI Polygraph
• U.S. citizenship is required

Equal Employment Opportunity

Base-2 Solutions is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy), national origin, age, sexual orientation, gender identity, genetic information, protected veteran status, or any other characteristic protected by law, and will not be discriminated against on the basis of disability. Learn more: base-2solutions.com/eeo