Posted today
Top Secret/SCI
Unspecified
Unspecified
Norfolk, VA (On-Site/Office)
Job Description :
This position is designated as key personnel and an advanced level Security Control Assessor. NQV shall conduct independent comprehensive assessments of the management, operational, and technical security controls and control enhancements employed within or inherited by an information technology (IT) system to determine the overall effectiveness of the controls. NQV shall provide independent cybersecurity support, analysis, documentation, and validation services for customer systems. NQV serves independently as a Navy Qualified Validator (NQV), performing validation activities under the RMF process using Navy Security Control Assessor approved processes and applies knowledge of DoD or DoN network architectures and policy toward assessment and identification of vulnerabilities as a means of improving operational security posture in accordance with the Risk Management Framework Process Guide series. NQV shall apply Navy Assessment & Authorization (A&A) guidance and policy to achieving/maintaining program objectives on time/schedule and guidance regarding vulnerability remediation and determination of risk posture.
o Responsible for conducting Validation and Risk Assessment (RA) activities in support of the customer (Validation Security Assessment Testing, System Risk Documentation, System Audits, Security Hardware and Software Testing).
o Responsible for creating and providing all RMF appropriate artifacts and documentation necessary to plan and execute a thorough test of systems, document the system risks and report on the identified risks as necessary.
o Produces complete and accurate risk assessments ISO RMF efforts.
o Actively work with the designated customer Information Systems Security Manager (ISSM) to provide final security assessment support and guidance.
o Required to engage with the system Information Systems Security Engineer (ISSE) and ISSE support staff throughout the RMF process.
o Responsible for validation events for all customer, cyber OT&E infrastructure, and toolsets.
o Maintain thorough and current knowledge of RMF and A&A processes and standards.
o Work closely with system owners, technical leads, cybersecurity staff, and other stakeholders to manage cybersecurity requirements.
o Execute and conduct analysis of network and system Assured Compliance Assessment Solution (ACAS) vulnerability scans (or other DoD approved tools) to validate appropriate implementation of security controls in accordance with NIST, DoD and DoN publications.
o Participate in technical meetings and topics, to assist and identify objectives in support of package development.
o Exercise strong customer service and excellent communication skills in a fast-paced environment.
o Adhere to guidance outlined in RMF Process Guide and Risk Assessment Guide.
Required Skills and Experience:
Minimum 8 years' experience as an NQV.
Proficiency in Enterprise Mission Assurance Support Service (eMASS) and familiarity with DoD Application and Database Management System (DADMS), along with a thorough understanding of National Institute of Standards and Technology (NIST) controls.
Minimum IAT II certification (CCNA Security, CySA+, GICSP, GSEC, Security+, CND, SSCP)
Prefer IAT III certification (CASP+, CCNP Security, CISA, CISSP (or Associate), GCED, GCIH, CCSP)
Degree Requirements:
Preferred BS degree in Information Technology, Cybersecurity, Data Science, Information Systems, or Computer Science
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.
ORBIS offers an excellent benefits package and a competitive salary in a professional atmosphere.
This position is designated as key personnel and an advanced level Security Control Assessor. NQV shall conduct independent comprehensive assessments of the management, operational, and technical security controls and control enhancements employed within or inherited by an information technology (IT) system to determine the overall effectiveness of the controls. NQV shall provide independent cybersecurity support, analysis, documentation, and validation services for customer systems. NQV serves independently as a Navy Qualified Validator (NQV), performing validation activities under the RMF process using Navy Security Control Assessor approved processes and applies knowledge of DoD or DoN network architectures and policy toward assessment and identification of vulnerabilities as a means of improving operational security posture in accordance with the Risk Management Framework Process Guide series. NQV shall apply Navy Assessment & Authorization (A&A) guidance and policy to achieving/maintaining program objectives on time/schedule and guidance regarding vulnerability remediation and determination of risk posture.
o Responsible for conducting Validation and Risk Assessment (RA) activities in support of the customer (Validation Security Assessment Testing, System Risk Documentation, System Audits, Security Hardware and Software Testing).
o Responsible for creating and providing all RMF appropriate artifacts and documentation necessary to plan and execute a thorough test of systems, document the system risks and report on the identified risks as necessary.
o Produces complete and accurate risk assessments ISO RMF efforts.
o Actively work with the designated customer Information Systems Security Manager (ISSM) to provide final security assessment support and guidance.
o Required to engage with the system Information Systems Security Engineer (ISSE) and ISSE support staff throughout the RMF process.
o Responsible for validation events for all customer, cyber OT&E infrastructure, and toolsets.
o Maintain thorough and current knowledge of RMF and A&A processes and standards.
o Work closely with system owners, technical leads, cybersecurity staff, and other stakeholders to manage cybersecurity requirements.
o Execute and conduct analysis of network and system Assured Compliance Assessment Solution (ACAS) vulnerability scans (or other DoD approved tools) to validate appropriate implementation of security controls in accordance with NIST, DoD and DoN publications.
o Participate in technical meetings and topics, to assist and identify objectives in support of package development.
o Exercise strong customer service and excellent communication skills in a fast-paced environment.
o Adhere to guidance outlined in RMF Process Guide and Risk Assessment Guide.
Required Skills and Experience:
Minimum 8 years' experience as an NQV.
Proficiency in Enterprise Mission Assurance Support Service (eMASS) and familiarity with DoD Application and Database Management System (DADMS), along with a thorough understanding of National Institute of Standards and Technology (NIST) controls.
Minimum IAT II certification (CCNA Security, CySA+, GICSP, GSEC, Security+, CND, SSCP)
Prefer IAT III certification (CASP+, CCNP Security, CISA, CISSP (or Associate), GCED, GCIH, CCSP)
Degree Requirements:
Preferred BS degree in Information Technology, Cybersecurity, Data Science, Information Systems, or Computer Science
- Must a U.S. citizen
- A TS/SCI security clearance
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.
ORBIS offers an excellent benefits package and a competitive salary in a professional atmosphere.
group id: 90973602
