Senior Information Systems Security Officer (ISSO)

Position Summary

As a Senior Level Information Systems Security Officer (ISSO) at Base-2 Solutions you will play a pivotal role in shaping and enhancing cybersecurity initiatives.

Essential Duties and Responsibilities

• Conduct technical security assessments and contribute to the security systems.
• Ensure system security compliance, manage risks, and support certification activities throughout the program life cycle.
• Work with the application leads, sysadmins, dbas, developers and testers to ensure the assigned systems are security compliant and achieve/maintain ATO.
• Answer questions to ensure systems are developed with security compliance built in.
• Support security assessment events and respond to all questions from ISSMs and SCAs
• Develop and maintain SSPs, POA&Ms, and other required security documentation using XACTA.
• Drive IATT and ATO efforts, coordinating with stakeholders, cyber, and Authorizing Official (AO).
• Implement and validate NIST 800-53 controls in cloud-native DPaaS environments.
• Apply Zero Trust principles to secure data services, including identity, segmentation, and flow control.

Required Qualifications

• Security+ or other IAT II/III level certification that is currently active.
• Proficiency with XACTA and RMF process, including managing IATT and ATO processes.
• Proficiency with Splunk.
• Experience conducting assessments of existing IT architecture for compliance with security requirements from applicable security frameworks (such as ICD 503).
• Experience with implementing and maintaining system security documentation, including SSPs, SAPs, POA&Ms, and security assessment artifacts, coordinating closely with ISSMs, ISSEs, system owners, and authorizing officials.

Preferred Qualifications

• Prior Information System Security Officer or Information System Security Engineer experience
• Proven experience leading cybersecurity initiatives for significant programs, showcasing a comprehensive understanding of large-scale program requirements.
• Demonstrated success in team management, highlighting the ability to effectively guide and coordinate cybersecurity professionals.
• Strong background in communication, with a track record of effectively engaging with customer, program leads, leadership teams, and engineers to convey complex cybersecurity concepts and strategies.

Required Education and Experience Equivalency

• 18 Years of experience in Security, Cyber, or Systems Engineering roles or a highly related field of work with similar scope and responsibilities.
• A bachelor's degree may be substituted for 4 years of experience and a master's degree may be substituted for 6 years of experience.