Senior ISSO - Cloud Security RMF/ATO Leader

Base-2 Solutions, LLC.; Annapolis (MD); On-site; USD 140,000 - 190,000; Full time

Job summary

Base-2 Solutions is seeking a Senior Level Information Systems Security Officer (ISSO) to shape cybersecurity initiatives and guide security programs. You will work with stakeholders to implement NIST 800-53 controls, maintain SSPs/POA&Ms, and drive IATT/ATO processes.

Ideal candidates possess active Security+ or equivalent, RMF/XACTA experience, and a proven track record in leading cybersecurity initiatives for large programs. U.S. citizenship and Top Secret/SCI with CI Poly are required.

Qualifications

• Active Security+ or other IAT II/III certification.
• Proficiency with XACTA and RMF processes, including IATT and ATO.
• Proficiency with Splunk for security monitoring and analysis.
• Experience assessing IT architectures for compliance with security requirements (e.g., ICD 503).
• Experience creating/maintaining SSPs, SAPs, POA&M and security artifacts, coordinating with ISSMs and AO.

Responsibilities

• Conduct technical security assessments and contribute to security systems.
• Ensure system security compliance, manage risks, and support certification activities.
• Collaborate with application leads, sysadmins, dbas, developers and testers to maintain ATO.
• Develop and maintain SSPs, POA&M and other security documentation using XACTA.
• Drive IATT and ATO efforts with stakeholders, cyber, and the AO.
• Implement and validate NIST 800-53 controls in cloud-native DPaaS environments.
• Apply Zero Trust principles to secure data services, including identity, segmentation, and flow control.

Education

Security+ or other IAT II/III cert (active)

Bachelor's degree (4-year substitution)

Master's degree (6-year substitution)

Tools

XACTA

RMF

Splunk

Job description

Base-2 Solutions is seeking a Senior Level Information Systems Security Officer (ISSO) to shape cybersecurity initiatives and guide security programs. You will work with stakeholders to implement NIST 800-53 controls, maintain SSPs/POA&Ms, and drive IATT/ATO processes.

Ideal candidates possess active Security+ or equivalent, RMF/XACTA experience, and a proven track record in leading cybersecurity initiatives for large programs. U.S. citizenship and Top Secret/SCI with CI Poly are required.