Senior ISSO — RMF/ATO Lead (TS/SCI)

Base-2 Solutions; Norfolk (VA); On-site; USD 110,000 - 160,000; Full time

Benefits offered by this job

Health insurance

Retirement plan 401(k) match

Life insurance

Paid time off

Disability insurance

Job summary

Base-2 Solutions seeks an Information System Security Officer to ensure security compliance and maintain Authority to Operate (ATO). The role follows RMF for full/partial testing, CONMON, and no-test scenarios, updating Xacta artifacts and supporting assessments.

You will collaborate with application leads, sysadmins, DBAs, developers, and testers to embed security into systems, load STIGs, and drive remediation of findings.

Qualifications

• Bachelor's degree in computer science, software engineering, or a related field.
• 9+ years of relevant experience with a Bachelor's degree.
• Experience developing and enforcing security policies to ensure regulatory compliance.
• Proven track record in risk assessments and identifying vulnerabilities.
• Experience developing and overseeing mitigation strategies to reduce risks.
• Strong background in monitoring systems and networks for security breaches.
• History of responding to security incidents and implementing corrective actions.
• Active Top Secret/SCI with CI Polygraph clearance.

Responsibilities

• Work with application leads, sysadmins, DBAs, developers, and testers to ensure security compliance and ATO.
• Follow the RMF process for full/partial test, CONMON, and no test scenarios.
• Update Xacta documentation including SSPs, SCTM, STPs, and POAMs.
• Load artifacts such as STIG checklists and ACAS scans and mitigate findings.
• Support security assessment events and respond to questions from PAT, ISSMs, and SCAs.
• Assist in developing and enforcing security policies, standards, and procedures.

Skills

RMF process

Xacta

SSP updates

STIG checklists

ACAS scans

Vulnerability management

Incident response

Risk assessment

Security monitoring

Mitigation strategies

Education

Bachelor's degree in CS/related field

Tools

Xacta

ACAS

STIG

Job description

Base-2 Solutions seeks an Information System Security Officer to ensure security compliance and maintain Authority to Operate (ATO). The role follows RMF for full/partial testing, CONMON, and no-test scenarios, updating Xacta artifacts and supporting assessments.

You will collaborate with application leads, sysadmins, DBAs, developers, and testers to embed security into systems, load STIGs, and drive remediation of findings.