Senior ISSO - RMF/ATO Compliance & Security Assessments

RPMGlobal; Annapolis (MD); On-site; USD 110,000 - 160,000; Full time

Job summary

Base-2 Solutions is seeking an Information System Security Officer to collaborate with application leads, system and database admins, developers, and testers to ensure security compliance and achieve or maintain Authority to Operate (ATO). The role follows the RMF process for various testing scenarios, updates SSPs, SCTMs, STPs, and POAMs, and loads STIG and ACAS artifacts.

Responsibilities include implementing STIGs, mitigating findings, and supporting security assessments by addressing

Qualifications

• Bachelor's degree in computer science, software engineering, or a related field.
• 9+ years of relevant experience with a Bachelor's degree; other combos acceptable.
• Proven experience developing, implementing, and enforcing security policies and procedures.
• Experience conducting risk assessments and identifying vulnerabilities.
• Experience in mitigating security risks and monitoring systems for breaches.
• Record of responding to security incidents and implementing corrective actions.

Responsibilities

• Work with cross-functional teams to ensure security compliance and maintain ATO.
• Follow RMF process for full/partial test, CONMON and no test scenarios.
• Update Xacta documentation: SSPs, SCTM, STPs, POAMs.
• Load artifacts like STIG checklists and ACAS scans; mitigate findings.
• Support security assessment events and respond to ST&E team questions.

Skills

Policy enforcement

Risk assessments

Vulnerability management

Security monitoring

Incident response

Education

Bachelor's degree in CS / SE or related field

Experience-based equivalencies accepted

High School + 13 years experience

Associates + 11 years experience

Master's + 7 years experience

PhD + 5 years experience

Tools

Xacta

STIG checklists

ACAS scans

Job description

Base-2 Solutions is seeking an Information System Security Officer to collaborate with application leads, system and database admins, developers, and testers to ensure security compliance and achieve or maintain Authority to Operate (ATO). The role follows the RMF process for various testing scenarios, updates SSPs, SCTMs, STPs, and POAMs, and loads STIG and ACAS artifacts.

Responsibilities include implementing STIGs, mitigating findings, and supporting security assessments by addressing