Senior Information Systems Security Officer (ISSO)

Base-2 Solutions · Annapolis Junction, MD · 3 wk ago

Full-time

About the role

As a Senior Level Information Systems Security Officer (ISSO) at Base-2 Solutions you will play a pivotal role in shaping and enhancing cybersecurity initiatives.

Responsibilities

Conduct technical security assessments and contribute to the security systems.
Ensure system security compliance, manage risks, and support certification activities throughout the program life cycle.
Work with the application leads, sysadmins, DBAs, developers and testers to ensure the assigned systems are security compliant and achieve/maintain ATO.
Answer questions to ensure systems are developed with security compliance built in.
Support security assessment events and respond to all questions from ISSMs and SCAs.
Develop and maintain SSPs, POA&Ms, and other required security documentation using XACTA.
Drive IATT and ATO efforts, coordinating with stakeholders, cyber, and Authorizing Official (AO).
Implement and validate NIST 800-53 controls in cloud-native DPaaS environments.
Apply Zero Trust principles to secure data services, including identity, segmentation, and flow control.

Requirements

Security+ or other IAT II/III level certification that is currently active.
Proficiency with XACTA and RMF process, including managing IATT and ATO processes.
Proficiency with Splunk.
Experience conducting assessments of existing IT architecture for compliance with security requirements from applicable security frameworks (such as ICD 503).
Experience with implementing and maintaining system security documentation, including SSPs, SAPs, POA&Ms, and security assessment artifacts, coordinating closely with ISSMs, ISSEs, system owners, and authorizing officials.

Preferred qualifications

Prior Information System Security Officer or Information System Security Engineer experience.
Proven experience leading cybersecurity initiatives for significant programs, showcasing a comprehensive understanding of large-scale program requirements.
Demonstrated success in team management, highlighting the ability to effectively guide and coordinate cybersecurity professionals.
Strong background in communication, with a track record of effectively engaging with customer, program leads, leadership teams, and engineers to convey complex cybersecurity concepts and strategies.

Education & experience

18 years of experience in Security, Cyber, or Systems Engineering roles or a highly related field of work with similar scope and responsibilities. A bachelor's degree may be substituted for 4 years of experience and a master's degree may be substituted for 6 years of experience.

Clearance & citizenship

Active Top Secret/SCI with CI Polygraph. U.S. citizenship is required.

Pay

Competitive fixed salary or hourly pay based on experience, skills, location, and internal equity. Employee referral bonuses up to $10,000 per hired referral. Additional bonus opportunities for exceptional performance and contributions to business development and company growth (role-dependent).

Benefits

100% company-paid medical premiums for employees and eligible dependents. Choose from multiple plan options with CareFirst, Kaiser, and UnitedHealthcare, including PPO, POS, HMO, and HSA-compatible plans.
100% company-paid dental premiums for employees and eligible dependents.
100% company-paid vision premiums for employees and eligible dependents.
100% company-paid premiums for short-term disability.
100% company-paid premiums for long-term disability.
100% company-paid premiums for accidental death & dismemberment (AD&D).
100% company-paid premiums for life insurance up to $200,000.
401(k) with immediate vesting: 4% company match plus a 4% non-elective company contribution (8% total). 401(k) pre-tax and Roth options.
Up to 20 days of flexible paid time off (PTO).
11 paid floating holidays.

Schedule

Flexible work schedules, including flex time and compressed work periods (contract and project-dependent).