Senior ISSO — RMF, ATO & Zero Trust Security Leader

Base-2 Solutions, LLC.; Reston (VA); Sur place; USD 130 000 - 185 000; Plein temps

Résumé du poste

Base-2 Solutions, LLC in Reston, Virginia is seeking a Senior Level Information Systems Security Officer (ISSO) to drive cybersecurity initiatives, shape risk management, and ensure system security compliance across programs from design to operations.

The role requires hands-on RMF activities, managing IATT and ATO processes, developing SSPs and POA&M, applying NIST 800-53 controls in cloud-native DPaaS, and integrating Zero Trust principles while coordinating with ISSMs, system owners, and

Qualifications

• 18 years of experience in Security, Cyber, or Systems Engineering or related field.
• Active Top Secret/SCI with CI polygraph.
• Proficient with RMF and XACTA; able to manage IATT and ATO processes.
• Experience developing SSPs, SAPs, POA&M and security artifacts.
• Ability to implement and validate security controls per NIST 800-53.

Responsabilités

• Conduct technical security assessments and contribute to security systems.
• Ensure system security compliance, manage risks, and support certification activities.
• Coordinate with application leads, sysadmins, dbas, developers and testers to achieve ATO.
• Develop and maintain SSPs, POA&M, and other security documentation using XACTA.
• Drive IATT and ATO efforts with stakeholders, cyber, and AO.
• Implement NIST 800-53 controls in cloud-native DPaaS environments.
• Apply Zero Trust principles to secure data services, including identity, segmentation, and flow control.

Connaissances

Security+ cert

XACTA

RMF process

Splunk

NIST 800-53

ATo/IATT coordination

Formation

Bachelor's degree in a related field

Master's degree preferred

Description du poste

Base-2 Solutions, LLC in Reston, Virginia is seeking a Senior Level Information Systems Security Officer (ISSO) to drive cybersecurity initiatives, shape risk management, and ensure system security compliance across programs from design to operations.

The role requires hands-on RMF activities, managing IATT and ATO processes, developing SSPs and POA&M, applying NIST 800-53 controls in cloud-native DPaaS, and integrating Zero Trust principles while coordinating with ISSMs, system owners, and