Senior ISSO — RMF/ATO Security Lead

Base-2 Solutions; Norfolk (VA); On-site; USD 95,000 - 130,000; Full time

Benefits offered by this job

Medical premiums paid for employees

Dental premiums paid for employees

Vision premiums paid for employees

Disability insurance

Life insurance

401(k) with company match

Paid time off

Floating holidays

Flexible work schedules

Job summary

Base-2 Solutions seeks an Information System Security Officer to collaborate with application leads, system admins, database admins, developers and testers to ensure security compliance and maintain Authority to Operate (ATO) under RMF. The role includes updating Xacta documentation such as SSPs, SCTM, STPs and POAMs, loading artifacts, and mitigating findings.

You will support security assessments, respond to PAT team, ISSMs and SCAs, and help implement risk mitigation.

Qualifications

• Bachelor's degree in computer science, software engineering, or a field applicable to the position required.
• 9 or more years of relevant experience required with a Bachelor's degree.
• Experience developing, implementing, and enforcing security policies, standards, and procedures.

Responsibilities

• Work with leads and admins to ensure security compliance and maintain ATO.
• Follow RMF process for full/partial CONMON and no test scenarios.
• Update Xacta docs: SSPs, SCTM, STPs, POAMs.
• Load STIGs and ACAS scans; mitigate findings.
• Support security assessment events and respond to inquiries from PAT team, ISSMs, and SCAs.

Skills

RMF process

Xacta documentation

SSP

ACAS

STIG

POAM

Security policies

Risk assessment

Incident response

Regulatory compliance

Vulnerability management

Education

Bachelor's degree in CS/SE or related field

High School with extensive experience

Associates with experience

Master's with experience

PhD with experience

Tools

Xacta

ACAS

Job description

Base-2 Solutions seeks an Information System Security Officer to collaborate with application leads, system admins, database admins, developers and testers to ensure security compliance and maintain Authority to Operate (ATO) under RMF. The role includes updating Xacta documentation such as SSPs, SCTM, STPs and POAMs, loading artifacts, and mitigating findings.

You will support security assessments, respond to PAT team, ISSMs and SCAs, and help implement risk mitigation.