Senior ISSO - RMF & ATO Expert (Top Secret/SCI)

Base-2 Solutions; Reston (VA); On-site; USD 140,000 - 210,000; Full time

Benefits offered by this job

Excellent health benefits

401(k) with match

Paid time off and holidays

Professional development support

Job summary

Base-2 Solutions seeks a Senior Information System Security Officer to collaborate with application leads, sysadmins, and developers to sustain security compliance and ATO status. The role follows RMF processes for full and partial testing, continuous monitoring, and no-test scenarios, updating SSPs, SCTMs, STPs, and POAMs in Xacta.

Responsibilities include loading STIG checklists and ACAS scans, implementing STIGs, addressing findings, and supporting ST&E, ISSMs, and SCAs with security

Qualifications

• Bachelor's degree in computer science, software engineering, or related field.
• 19+ years of experience with a Bachelor's degree, or equivalency.
• Experience developing and enforcing security policies and procedures.
• Active Top Secret/SCI with CI Polygraph clearance.
• Strong track record in risk assessments, vulnerability management, and incident response.

Responsibilities

• Work with cross-functional teams to ensure security compliance and ATO.
• Follow RMF processes for full/partial tests and continuous monitoring.
• Update Xacta artifacts: SSPs, SCTMs, STPs, POAMs.
• Load STIG and ACAS artifacts; mitigate findings and support assessments.
• Respond to questions from ST&E, ISSMs, and SCAs; support secure development.
• Maintain security controls and coordinate with defense-in-depth teams.
• Help ensure systems are designed with security built in.

Skills

Security policy development

Risk assessment

Mitigation planning

Continuous monitoring

Incident response

RMF/CSM processes

Xacta / documentation

Education

Bachelor's degree in CS/SE or related field

High School + 23 years experience

Associate's + 21 years experience

Bachelor's + 19 years experience

Master's + 17 years experience

PhD + 15 years experience

Tools

Xacta

ACAS scans

STIG checklists

Job description

Base-2 Solutions seeks a Senior Information System Security Officer to collaborate with application leads, sysadmins, and developers to sustain security compliance and ATO status. The role follows RMF processes for full and partial testing, continuous monitoring, and no-test scenarios, updating SSPs, SCTMs, STPs, and POAMs in Xacta.

Responsibilities include loading STIG checklists and ACAS scans, implementing STIGs, addressing findings, and supporting ST&E, ISSMs, and SCAs with security