Navy Qualified Validator / Cyber Technician

KMS Solutions, LLC•Alexandria, VA

4d•$120,000 - $135,000•Hybrid

About The Position

The Navy Qualified Validator (NQV) / Cyber Security Technician will be responsible for assisting in the technical implementation of the Risk Management Framework (RMF) for Assess Only (AO) and Assessment and Authorization (A&A) services. They will conduct cybersecurity and risk assessments on Platform Information Technology (PIT) and PIT control systems (Industrial Control Systems) to identify and mitigate technical and non-technical vulnerabilities.

Requirements

A DoD Secret clearance is required for this position.
BA or BS degree in Computer Science/Engineering or related technical discipline.
IAT Level 2 certification or higher (ex. CompTIA Security+, CASP, CISSP).
5 or more years of experience with DoD Security Control Assessments, Information Assurance Certification and Accreditation Process (DIACAP)/ DoD Risk Management Framework (RMF).
Familiarity with network mapping, vulnerability scanning tools (e.g., ACAS, Nessus), and Security Technical Implementation Guides (STIGs) and Security Requirement Guides (SRGs).
Demonstrated working knowledge of DoD Information Assurance and Cybersecurity policies, procedures and practices including the Risk Management Framework (RMF) and NIST SP 800-53.
Ability to obtain and/or maintain a DoD Secret Security Clearance and required access to all worksite locations.
Legally authorized to work in the United States at the time of hire and throughout employment.

Nice To Haves

Possess a Navy Qualified Validator Certification (NQV) and be in good standing (be on the current NQV list).
Familiarity with US Naval systems.
Systems Engineering experience.

Responsibilities

Assess and document risk, perform security control assessments, and document compliant and failed security controls in eMASS.
Assist with eMASS data entry requirements and population. Recommend corrections to eMASS record.
Perform duties of an NQV Level II equivalent in execution of DoN RMF processes including the completion of workflow steps in eMASS, the development of RMF artifacts (Security Plan, Security Assessment Plan, Security Assessment Report, etc.) and the completion of Security Assessments.
Apply your demonstrated knowledge to assess compliance with NIST 800-53A Security Controls for Assess Only systems.
Ensure traceability of all vulnerabilities from raw assessment results to the POA&M.
Support the continuous monitoring program as necessary.