ConMon Validator

RDR•Chantilly, VA

About The Position

The ConMon Validator supports a high-profile national security customer in strengthening its cybersecurity posture and building and maturing an enterprise Information Security Continuous Monitoring (ISCM) program. The role provides Systems Engineering and Technical Assistance (SETA) support across cybersecurity disciplines including Risk Management Framework (RMF), cyber defense operations, Assessment and Authorization (A&A), vulnerability management, FISMA compliance and reporting, information assurance governance, and security metrics and reporting. As a cybersecurity advisor, the ConMon Validator helps programs demonstrate compliance, improve reporting accuracy, validate security control evidence, and enhance continuous monitoring activities. The role works with ISCM leadership, ISSOs, Security Control Assessors, FISMA teams, Inspector General stakeholders, and senior government leaders to improve documentation, reporting, security governance, and risk-based decision-making across the enterprise.

Requirements

Active Top Secret clearance with SCI eligibility and a favorable Polygraph.
Current DoD 8570 IAT or IAM certification.
Experience implementing the Risk Management Framework (RMF) and NIST 800-53 security controls.
Experience developing, reviewing, and maintaining cybersecurity authorization and accreditation documentation.
Experience serving in one or more of these roles: Information Systems Security Officer (ISSO), Information Systems Security Manager (ISSM), Security Control Assessor (SCA), or Delegated Authorizing Official Representative (DAOR).
Strong analytical and problem-solving skills.
Exceptional attention to detail and organizational ability.
Excellent written and verbal communication skills.
Ability to thrive in a collaborative, team-oriented environment.
Proficiency with Microsoft Office Suite, including Outlook, Excel, PowerPoint, and SharePoint.
Ability to work independently and manage competing priorities with minimal oversight.

Nice To Haves

Direct experience supporting an Information Security Continuous Monitoring (ISCM) program.
Bachelor's degree in a STEM discipline or an advanced cybersecurity certification such as CISSP, CASP+, or equivalent.
Experience supporting Intelligence Community (IC) or Department of Defense (DoD) cybersecurity initiatives.
Experience briefing senior government leaders and executive stakeholders.
Familiarity with cybersecurity governance, acquisition programs, and project management practices.
Hands-on experience with RSA Archer, ServiceNow, or Xacta.
Cloud security experience and related certifications.
Knowledge of security metrics development, compliance reporting, and enterprise risk management concepts.

Responsibilities

Support the development, implementation, and maturation of the customer's enterprise Continuous Monitoring (ConMon) program.
Validate security control evidence and documentation for effectiveness, completeness, and compliance with organizational requirements.
Partner with ISCM leadership to identify process improvements and operational efficiencies.
Review and assess ConMon Bodies of Evidence (BOEs) submitted through enterprise cybersecurity tools.
Coach and mentor ISSOs on creating stronger, more meaningful, and defensible security evidence.
Improve the quality, consistency, and fidelity of security documentation across multiple programs.
Collaborate with Security Control Assessors, FISMA teams, and Inspector General stakeholders in support of audits, assessments, and compliance reviews.
Develop cybersecurity metrics and reporting that support informed risk decisions by Authorizing Officials and senior leaders.
Analyze trends, identify gaps, and recommend improvements to enterprise reporting and monitoring capabilities.
Evaluate and recommend enhancements to Enterprise Security Services tools and processes.
Contribute to enterprise-wide initiatives that strengthen cybersecurity governance, compliance, and operational resilience.