Senior ISSO — TS/SCI RMF & ATO Expert

Base-2 Solutions; Washington (District of Columbia); On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

Company-paid health premiums

401(k) with company match

Job summary

Base-2 Solutions is seeking an Information System Security Officer to ensure security compliance and maintain Authority to Operate (ATO). The role collaborates with application leads, admins, and developers to follow RMF, manage artifacts in Xacta, and respond to ST&E inquiries.

You will load STIGs, ACAS scans, and support security assessments while updating SSPs, SCTMs, STPs, and POAMs, ensuring robust regulatory compliance and secure system operations.

Qualifications

• Bachelor's in CS/engineering or related field is required.
• 9+ years of relevant security experience with a degree.
• Experience implementing RMF, ATO processes.
• Proven ability to mitigate vulnerabilities and incidents.
• Strong documentation and artifact management skills.

Responsibilities

• Collaborate with leads, admins, developers to ensure security compliance and ATO.
• Follow RMF for full/partial/CONMON/no test scenarios.
• Update SSPs, SCTM, STPs, POAMs documentation.
• Load STIGs and ACAS scans as artifacts and track findings.
• Assist ST&E team, ISSMs, and SCAs with questions during assessments.
• Ensure security is built into system development lifecycle.

Skills

RMF processes

Xacta

Risk management

Security incident response

Security controls

Education

Bachelor's degree in CS/Engineering or related field

9+ years of relevant experience with Bachelor's degree

Equivalent experience accepted

Tools

Xacta

ACAS

STIGs

SSP templates

Job description

Base-2 Solutions is seeking an Information System Security Officer to ensure security compliance and maintain Authority to Operate (ATO). The role collaborates with application leads, admins, and developers to follow RMF, manage artifacts in Xacta, and respond to ST&E inquiries.

You will load STIGs, ACAS scans, and support security assessments while updating SSPs, SCTMs, STPs, and POAMs, ensuring robust regulatory compliance and secure system operations.