Specialist, Accreditor/Validator III

DirectViz Solutions, LLC•Virginia Beach, VA

7d•Onsite

About The Position

DirectViz Solutions (DVS) is seeking a highly skilled Specialist, Accreditor/Validator III to support Navy cybersecurity and Risk Management Framework (RMF) validation activities. This role is responsible for conducting security validation assessments, performing vulnerability and compliance reviews, supporting RMF authorization activities, and providing cybersecurity risk reduction recommendations for Navy systems and environments. The ideal candidate will possess extensive experience supporting Navy RMF validation efforts, conducting STIG and vulnerability assessments, and working within enterprise cybersecurity compliance environments.

Requirements

Current Navy Qualified Validator (NQV) Level II or Level III certification.
Minimum certification equivalent to DoD 8140 Intermediate Level 612 (or successor requirement as defined by current Technical Instructions).
Must possess and maintain a final adjudicated Tier 5 security investigation with IT Level I designation in JPAS and/or DISS.
Minimum of five (5) years of experience performing RMF Validation for Navy systems.
Demonstrated experience conducting STIG assessments utilizing SCAP benchmarks.
Hands-on experience performing vulnerability assessments using ACAS.
Experience utilizing eMASS for RMF documentation and authorization activities.
Experience developing Security Assessment Plans (SAPs).
Experience performing cybersecurity Risk Assessments.
Experience supporting RMF Step 5 authorizations in a Validator role.
Demonstrated ability to communicate cybersecurity risk reduction recommendations to stakeholders.
Active Secret Clearance required.
Must be eligible to maintain required Tier 5 adjudication and IT Level I access requirements.
Maintain focus and awareness throughout scheduled working hours.
Perform tasks requiring prolonged periods of sitting or standing at a desk, utilizing a computer, mouse, and keyboard.
Lift and move objects weighing up to 15 pounds as needed.
Exhibit excellent verbal and written communication skills, with a strong command of the English language.
Demonstrate the ability to work independently while also collaborating effectively as part of a team.
Quickly learn and retain routine tasks and processes.
Possess strong organizational skills, attention to detail, business correspondence proficiency, and self-management capabilities.
Perform the essential functions of the role satisfactorily; reasonable accommodation will be provided for employees with disabilities upon request.
Accept and adapt to additional responsibilities or changes to assigned duties as determined by DirectViz Solutions (DVS).

Nice To Haves

Strong understanding of Navy cybersecurity compliance requirements and RMF processes.
Familiarity with NIST 800-53, DoD cybersecurity policies, and DISA STIG requirements.
Excellent analytical, communication, and documentation skills.
Ability to work independently and collaboratively in a fast-paced mission environment.

Responsibilities

Perform Risk Management Framework (RMF) validation activities for Navy systems and environments.
Conduct Security Technical Implementation Guide (STIG) assessments utilizing SCAP benchmarks and related assessment tools.
Perform vulnerability assessments using Assured Compliance Assessment Solution (ACAS).
Support RMF Step 5 authorization activities in a Validator capacity.
Develop and maintain Security Assessment Plans (SAPs) and supporting cybersecurity documentation.
Conduct cybersecurity risk assessments and provide mitigation and risk reduction recommendations to stakeholders.
Utilize Enterprise Mission Assurance Support Service (eMASS) to document, track, and manage RMF activities.
Analyze cybersecurity findings and coordinate remediation efforts with system owners, engineers, and program stakeholders.
Ensure compliance with Department of Defense (DoD), Department of the Navy (DON), and applicable cybersecurity policies and standards.
Communicate technical findings, recommendations, and security risks clearly to both technical and non-technical personnel.