Senior ISSO (TS/SCI) RMF/ATO | On-Site DC

Base-2 Solutions; Washington (District of Columbia); On-site; USD 150,000 - 190,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

401(k) plan

Job summary

Base-2 Solutions is seeking an Information System Security Officer to work with application leads, system administrators, database administrators, developers, and testers to ensure assigned systems are security compliant and achieve or maintain Authority to Operate (ATO).

The role includes following the RMF process for full test, partial test, continuous monitoring (CONMON), and no test scenarios, updating Xacta documentation including System Security Plans (SSPs), Security Control Trace

Qualifications

• Bachelor's degree required or equivalent experience.
• 9+ years of relevant experience with Bachelor's degree.
• Proven experience developing, implementing and enforcing security policies and procedures.
• Experience conducting risk assessments and identifying vulnerabilities.
• Experience in monitoring systems and responding to security incidents.

Responsibilities

• Work with application leads, system administrators, DBAs, developers and testers to ensure security compliance and maintain ATO.
• Follow RMF processes for full/partial testing and continuous monitoring.
• Update Xacta documentation including SSPs, SCTMs, STPs and POAMs.
• Load artifacts such as STIG checklists and ACAS scans.
• Help implement STIGs and mitigate scan findings.
• Support security assessment events and respond to ST&E questions from ISSMs and SCAs.

Skills

RMF knowledge

Risk assessment

Security compliance

Incident response

Monitoring

Education

Bachelor's degree in computer science or related field

Tools

Xacta

STIG checklists

ACAS scans

SCTM

POAMs

Job description

Base-2 Solutions is seeking an Information System Security Officer to work with application leads, system administrators, database administrators, developers, and testers to ensure assigned systems are security compliant and achieve or maintain Authority to Operate (ATO).

The role includes following the RMF process for full test, partial test, continuous monitoring (CONMON), and no test scenarios, updating Xacta documentation including System Security Plans (SSPs), Security Control Trace