Navy Qualified Validator (NQV)

UIC Alaska•Corona, CA

16d

About The Position

Overview Bowhead seeks a Navy Qualified Validator to join our team supporting NSWC Corona – Corona Division. The NQV will work directly with the client analyzing complex and unique technical support assignments and collaborate with other cyber security engineers, system administrators, and program analysts within a scaled agile environment. The NQV will work directly with the Navy SCA when assigned to manage all eMASS packages in the NSCW Corona portfolio. Responsibilities Act as Validator for all RMF packages for the NSWC Corona – Corona Division. Serve as portfolio SME for the Portfolio Information Systems Security Manager (ISSM) in compliance reviews of systems. Manage, track and delegate all cybersecurity actions for division. Contribute to the development of cybersecurity policies and procedures. Responsible for reviewing, assessing, and managing cybersecurity risks. Responsible for the management of Risk Management Framework (RMF) best practices to attain/ maintain continuous Authority-to-Operate (ATO) capability. Ensure the cybersecurity posture of assigned projects. Direct RMF continuous ATO attainment/maintenance. Research National Institute of Standards and Technology (NIST), DoD and Navy Guidance on Cybersecurity and related topics in response to requests for data or information related to cybersecurity topics, posture, impacts, or issues and reviews. Review architectures and designs for cybersecurity compliance and provide recommendations. Ability to perform and troubleshoot security measures including analysis, periodic testing, evaluation, verification, accreditation, and review of information system installations at appropriate classification levels. Review results in a cybersecurity impact assessment report when required. Other duties as assigned.

Requirements

Must be on NQV List or if moved to inactive been on NQV list within last 18 months where reactivation can be obtained (Alternatively, equivalent experience as an ISSO will also be considered)
10+ Years and bachelor’s degree in Information Systems, Engineering, Computer Science, or Business or similar field with the following experience:
Nessus/ACAS Scanner Experience - ACAS dashboard, setup, ability to run scans, ability to troubleshoot scanner and scanner results
NIST/STIG Experience - Experience with STIG Viewer/validation/analyzing and compiling results into a POA&M
RMF Experience - Experience with eMASS, Artifacts, Test Plans, Control Assessments, and compiling tools to process and collate test results
CISSP Certification
IAT Level II Certified
Ability to provide presentations to senior level staff
Advanced level skills in Microsoft Office software suite - Word, Excel, Outlook, PowerPoint
Ability to communicate effectively with all levels of employees, Government personnel, and other stakeholders
Ability to write effectively
Strong interpersonal skills, good judgment, and the ability to lead a team or perform independently
SECURITY CLEARANCE REQUIREMENTS: Must currently hold a security clearance at the minimum Secret level.
Must be able to lift up to 25 pounds
Must be able to stand and walk for prolonged amounts of time
Must be able to twist, bend and squat periodically

Responsibilities

Act as Validator for all RMF packages for the NSWC Corona – Corona Division.
Serve as portfolio SME for the Portfolio Information Systems Security Manager (ISSM) in compliance reviews of systems.
Manage, track and delegate all cybersecurity actions for division.
Contribute to the development of cybersecurity policies and procedures.
Responsible for reviewing, assessing, and managing cybersecurity risks.
Responsible for the management of Risk Management Framework (RMF) best practices to attain/ maintain continuous Authority-to-Operate (ATO) capability.
Ensure the cybersecurity posture of assigned projects.
Direct RMF continuous ATO attainment/maintenance.
Research National Institute of Standards and Technology (NIST), DoD and Navy Guidance on Cybersecurity and related topics in response to requests for data or information related to cybersecurity topics, posture, impacts, or issues and reviews.
Review architectures and designs for cybersecurity compliance and provide recommendations.
Ability to perform and troubleshoot security measures including analysis, periodic testing, evaluation, verification, accreditation, and review of information system installations at appropriate classification levels.
Review results in a cybersecurity impact assessment report when required.
Other duties as assigned.