Senior RMF & Information Security Officer

Base-2 Solutions; Washington (District of Columbia); On-site; USD 140,000 - 180,000; Full time

Benefits offered by this job

Health insurance

Dental/Vision insurance

401(k) with employer match

Paid time off

Job summary

Base-2 Solutions is seeking a Senior Information System Security Officer to collaborate with application leads, system administrators, database administrators, developers, and testers to ensure security compliant systems and achieve or maintain Authority to Operate (ATO).

The role emphasizes following RMF for full/partial test, CONMON, and no test scenarios, updating Xacta docs (SSPs, SCTM, STPs, POAMs), loading STIGs and ACAS scans, and supporting ST&E, ISSMs, and SCAs with timely responses.

Qualifications

• Bachelor's degree in computer science, software engineering, or a related field.
• Demonstrated experience developing, implementing, and enforcing security policies and procedures.
• Experience conducting risk assessments and identifying vulnerabilities.
• Experience developing mitigation strategies to reduce security risks.
• Strong monitoring of systems and networks for security breaches.

Responsibilities

• Collaborate with leads, admins, developers, and testers to ensure security compliance and ATO.
• Follow RMF for full/partial test, CONMON, and no test scenarios.
• Update Xacta documentation: SSPs, SCTM, STPs, POAMs.
• Load STIG checklists and ACAS scans, mitigate findings.
• Support security assessment events and respond to ST&E team, ISSMs, and SCAs.

Skills

Security policy development

Risk assessments

Mitigation strategies

Security monitoring

Incident response

Education

Bachelor's degree in Computer Science or Software Engineering

High School with 23 years of experience

Associate's with 21 years of experience

Master's with 17 years of experience

PhD with 15 years of experience

Tools

Xacta

STIG checklists

ACAS

RMF process

Job description

Base-2 Solutions is seeking a Senior Information System Security Officer to collaborate with application leads, system administrators, database administrators, developers, and testers to ensure security compliant systems and achieve or maintain Authority to Operate (ATO).

The role emphasizes following RMF for full/partial test, CONMON, and no test scenarios, updating Xacta docs (SSPs, SCTM, STPs, POAMs), loading STIGs and ACAS scans, and supporting ST&E, ISSMs, and SCAs with timely responses.