Senior ISSO (TS/SCI) – RMF/ATO Security Lead

Base-2 Solutions; Norfolk (VA); On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

Health benefits plan options

Company-paid premiums for medical, 2-3

401(k) with company match

Paid time off and floating holidays

Flexible work schedules

Job summary

Base-2 Solutions seeks an Information System Security Officer to work with application leads, administrators, developers, and testers to ensure systems are security compliant and achieve or maintain Authority to Operate (ATO).

The role follows the RMF process for full and partial testing, CONMON, and no-test scenarios, updates Xacta artifacts and documentation, loads STIG/ACAS artifacts, and supports security assessment events and inquiries from PAT, ISSMs, and SCAs.

Qualifications

• Bachelor's degree is required; 9+ years of relevant experience with a degree.
• Experience developing and enforcing security policies to ensure compliance.
• Proven track record in risk assessments and identifying vulnerabilities.
• Experience in mitigation strategies and security incident handling.

Responsibilities

• Collaborate with application leads and admins to ensure security compliance and ATO.
• Follow RMF process for full/partial tests, CONMON, and no-test scenarios.
• Update Xacta documentation: SSPs, SCTM, STPs, and POAMs.
• Load artifacts like STIG checklists and ACAS scans, and mitigate findings.
• Support security assessments and respond to PAT, ISSMs, and SCA inquiries.

Skills

Risk assessment

Incident response

Regulatory compliance

Security monitoring

Vulnerability remediation

Team collaboration

Education

Bachelor's degree

Master's degree

PhD

Tools

XACTA

ACAS

STIGs

Job description

Base-2 Solutions seeks an Information System Security Officer to work with application leads, administrators, developers, and testers to ensure systems are security compliant and achieve or maintain Authority to Operate (ATO).

The role follows the RMF process for full and partial testing, CONMON, and no-test scenarios, updates Xacta artifacts and documentation, loads STIG/ACAS artifacts, and supports security assessment events and inquiries from PAT, ISSMs, and SCAs.