Senior ISSO: Top Secret/SCI, CI Poly, On Site

Base-2 Solutions; Norfolk (VA); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Health benefits paid by employer

401(k) plan with company match

Paid time off

Job summary

Base-2 Solutions is seeking a Senior Information System Security Officer to ensure security compliance and achieve or maintain Authority to Operate (ATO). The role involves RMF, CONMON, and updating Xacta artifacts such as SSPs, SCTMs, STPs, and POAMs, while loading STIG checklists and ACAS scans.

The candidate will work with application leads, system admins, DBAs, developers, and testers to answer ST&E questions and implement mitigation strategies, ensuring systems stay secure and compliant

Qualifications

• Bachelor's degree in computer science, software engineering, or related field; equivalent experience considered.
• Minimum 19+ years of relevant experience with a Bachelor's degree.
• Experience developing, implementing, and enforcing security policies and procedures.
• Proven track record in risk assessments and identifying vulnerabilities in systems, networks, and applications.
• Experience overseeing mitigation strategies to reduce security risks.

Responsibilities

• Work with application leads, system administrators, database admins, developers, and testers to ensure security compliance and maintain ATO.
• Follow RMF processes for full/partial test and continuous monitoring (CONMON).
• Update Xacta documentation including SSPs, SCTMs, STPs, and POAMs.
• Load artifacts like STIG checklists and ACAS scans.
• Help implement STIG checklists and mitigate scan findings.
• Answer questions to ensure security is built in during development.
• Support security assessment events and respond to questions from ISSMs and SCAs.

Skills

Security policy development

Risk assessment

Vulnerability management

Incident response

Network security monitoring

Education

Bachelor's degree or equivalent

Tools

Xacta

STIGs

ACAS

RMF

Job description

Base-2 Solutions is seeking a Senior Information System Security Officer to ensure security compliance and achieve or maintain Authority to Operate (ATO). The role involves RMF, CONMON, and updating Xacta artifacts such as SSPs, SCTMs, STPs, and POAMs, while loading STIG checklists and ACAS scans.

The candidate will work with application leads, system admins, DBAs, developers, and testers to answer ST&E questions and implement mitigation strategies, ensuring systems stay secure and compliant