Senior Information Systems Security Officer (ISSO)
Base-2 Solutions · Reston, VA · 3 wk ago
Full-time
Requisition ID: 5516 | Location: Reston, VA | Work Type: Hybrid (On-Site and Remote) | Shift: First | Referral Eligibility: Eligible | U.S. Citizenship Required: Yes
About the role
As a Senior Level Information Systems Security Officer (ISSO) at Base-2 Solutions you will play a pivotal role in shaping and enhancing cybersecurity initiatives.
Responsibilities
- Conduct technical security assessments and contribute to the security systems.
- Ensure system security compliance, manage risks, and support certification activities throughout the program life cycle.
- Work with the application leads, sysadmins, DBAs, developers and testers to ensure the assigned systems are security compliant and achieve/maintain ATO.
- Answer questions to ensure systems are developed with security compliance built in.
- Support security assessment events and respond to all questions from ISSMs and SCAs.
- Develop and maintain SSPs, POA&Ms, and other required security documentation using XACTA.
- Drive IATT and ATO efforts, coordinating with stakeholders, cyber, and Authorizing Official (AO).
- Implement and validate NIST 800-53 controls in cloud-native DPaaS environments.
- Apply Zero Trust principles to secure data services, including identity, segmentation, and flow control.
Requirements
- Security+ or other IAT II/III level certification that is currently active.
- Proficiency with XACTA and RMF process, including managing IATT and ATO processes.
- Proficiency with Splunk.
- Experience conducting assessments of existing IT architecture for compliance with security requirements from applicable security frameworks (such as ICD 503).
- Experience with implementing and maintaining system security documentation, including SSPs, SAPs, POA&Ms, and security assessment artifacts, coordinating closely with ISSMs, ISSEs, system owners, and authorizing officials.
Preferred Qualifications
- Prior Information System Security Officer or Information System Security Engineer experience.
- Proven experience leading cybersecurity initiatives for significant programs, showcasing a comprehensive understanding of large-scale program requirements.
- Demonstrated success in team management, highlighting the ability to effectively guide and coordinate cybersecurity professionals.
- Strong background in communication, with a track record of effectively engaging with customer, program leads, leadership teams, and engineers to convey complex cybersecurity concepts and strategies.
Education & Experience
18 years of experience in Security, Cyber, or Systems Engineering roles or a highly related field of work with similar scope and responsibilities. A bachelor's degree may be substituted for 4 years of experience and a master's degree may be substituted for 6 years of experience.
Clearance & Citizenship
Active Top Secret/SCI with CI Polygraph required. U.S. citizenship is required.