Senior ISSO: Enterprise Security & Risk Architect

Talentify; Maryland; On-site; USD 150,000 - 185,000; Full time

Job summary

Base-2 Solutions is seeking a Senior Information Systems Security Officer responsible for safeguarding computer networks and systems to ensure data security, integrity, and confidentiality at the highest standards.

The role emphasizes loading and maintaining STIG/ACAS artifacts, performing security assessments, and guiding security planning and risk management activities across program systems and enclaves to achieve Authorization to Operate (ATO).

Qualifications

• Experience loading artifacts such as STIG checklists and ACAS scans.
• Experience helping to implement STIG checklists and mitigate scan findings.
• Experience supporting security assessment events and responding to questions from PAT team, ISSMs, and SCA.
• Experience working with application leads, sysadmins, DBAs, developers, and testers to ensure systems are security compliant and achieve/maintain ATO.

Responsibilities

• Designs, develops, implements and/or integrates IA and security systems and system components across networking, computing, and enclave environments.
• Analyzes architecture and system functionality for multiple technologies.
• Prepares and delivers technical reports and briefings on security posture.
• Assists architects and developers in implementing information security functionality for enterprise solutions.
• Supports building security architectures and enforcing trusted relationships among external systems.

Skills

IA systems

Risk management

Security assessments

Threat analysis

Penetration testing

Education

Bachelor's +14+ years

Master's +12+ years

PhD +10+ years

Tools

Xacta

Job description

Base-2 Solutions is seeking a Senior Information Systems Security Officer responsible for safeguarding computer networks and systems to ensure data security, integrity, and confidentiality at the highest standards.

The role emphasizes loading and maintaining STIG/ACAS artifacts, performing security assessments, and guiding security planning and risk management activities across program systems and enclaves to achieve Authorization to Operate (ATO).