Senior InfoSec Officer — IA, Risk & C&A Lead

Talentify; Norfolk (VA); On-site; USD 140,000 - 170,000; Full time

Job summary

Base-2 Solutions seeks a Senior Information Systems Security Officer to safeguard networks and data, ensuring confidentiality, integrity, and availability at the highest standards.

The role designs and integrates IA/security across multiple enclaves, conducts risk assessments, and supports ATO processes throughout the program life cycle while coordinating with PAT, ISSMs, SCA, and developers.

Qualifications

• Experience loading artifacts such as STIG checklists and ACAS scans.
• Experience helping to implement STIG checklists and mitigate scan findings.
• Experience supporting security assessment events and responding to questions from PAT team, ISSMs, and SCA.
• Experience working with application leads, sysadmins, DBAs, developers, and testers to ensure systems are security compliant and achieve/maintain ATO.

Responsibilities

• Designs, develops, implements and/or integrates IA and security systems and components for networking and enclave environments.
• Analyzes architecture and system functionality for multiple technologies.
• Prepares and delivers technical reports and briefings.
• Performs risk management framework activities and system security assessments.
• Assists architects and developers in enforcing uniform information security controls and enterprise solutions.
• Supports building security architectures and trusted relationships among external systems.

Skills

STIG loading

ACAS scans

Security assessment events

ATO processes

Education

Bachelor's degree + 14+ years experience

Master's degree + 12+ years experience

PhD + 10+ years experience

Tools

Xacta

Job description

Base-2 Solutions seeks a Senior Information Systems Security Officer to safeguard networks and data, ensuring confidentiality, integrity, and availability at the highest standards.

The role designs and integrates IA/security across multiple enclaves, conducts risk assessments, and supports ATO processes throughout the program life cycle while coordinating with PAT, ISSMs, SCA, and developers.