Senior InfoSec Officer – RMF/ATO Expert (TS/SCI)

Base-2 Solutions; Reston (VA); On-site; USD 130,000 - 190,000; Full time

Benefits offered by this job

Competitive salary

401(k) with company match

Company-paid health, dental, andvision

Floating holidays and PTO

Referral bonuses up to $10,000

Job summary

Base-2 Solutions is seeking a Senior Information System Security Officer in Reston, VA, to partner with application leads, system and database admins, developers, and testers to ensure compliance and maintain Authority to Operate. The role emphasizes RMF guidance, continuous monitoring, and artifacts loaded into Xacta such as SSPs, SCTMs, STPs, and POAMs.

You will respond to the ST&E team, ISSMs, and SCAs, implement STIG checklists, mitigate findings, and drive security controls across systems.

Qualifications

• Bachelor's degree in CS/SE or related field.
• 19+ years of relevant experience with a Bachelor's degree.
• Experience implementing RMF and achieving ATO.
• Proven ability to conduct risk assessments and mitigate vulnerabilities.
• Strong knowledge of security policies, standards, and regulatory compliance.

Responsibilities

• Ensure systems are security compliant and maintain ATO.
• Follow RMF for full/partial/CONMON/no test.
• Update SSPs, SCTMs, STPs, and POAMs in Xacta.
• Load STIGs and ACAS scans; mitigate findings.
• Support security assessment events and respond to ST&E, ISSMs, and SCAs.

Skills

RMF and NIST 800-53 controls

Xacta/Security artifacts

Vulnerability management and incident

Risk assessment and mitigation

Collaboration with IT teams

Education

Bachelor's degree in computer science / related field

19+ years of relevant experience with Bachelor's degree

Equivalents per degree path (Master/PhD) accepted

Tools

Xacta

ACAS

STIG checklists

POAM tracking

SCTM

Job description

Base-2 Solutions is seeking a Senior Information System Security Officer in Reston, VA, to partner with application leads, system and database admins, developers, and testers to ensure compliance and maintain Authority to Operate. The role emphasizes RMF guidance, continuous monitoring, and artifacts loaded into Xacta such as SSPs, SCTMs, STPs, and POAMs.

You will respond to the ST&E team, ISSMs, and SCAs, implement STIG checklists, mitigate findings, and drive security controls across systems.