Security Control Validator

MANTECH is seeking a motivated, career and customer-orien ted Security Control Validator to join our team in Stafford, VA. This will be a partially remote position with the candidate being required to come into the office to conduct validations upon request.

In this role, you will act as a critical Risk Management Framework (RMF) third-party evaluator, ensuring that the United States Marine Corps (USMC) networks, applications, and enterprise systems meet rigorous Department of War (DoW) and Marine Corps security controls.

Responsibilities include, but are not limited to:

• Lead and perform independent validation of Risk Management Framework (RMF) security controls for Marine Corps Systems to ensure compliance with NIST SP 800-53 Rev. 5 and CNSSI 1253.
• Plan, Coordinate, and execute Security Assessment Plans (SAP), documenting assessment procedures and validating evidence provided by Information System Security Officers (ISSOs) and System Owners.
• Conduct technical validation using automated testing tools (such as ACAS and SCAP Compliance Checker) and manual verification methods to evaluate system vulnerabilities and compliance postures.
• Produce highly detailed Security Assessment Reports (SAR) and review Plan of Action and Milestones (POA&M) to outline risk mitigation strategies for remainining vulnerabilities.
• Build and maintain comprehensive RMF assessment and authorization (A&A) packages within the Enterprise Mission Assurance support System (eMASS), utilizing automated security control inheritance and specialized process overlays.

Minimum Requirements:

• Bachelor's Degree and at least 5 years of related experience to include the following (additional 2 years of experience can be substituted in lieu of degree):
• Must be compliant with DoD 8140 at an intermediate or advanced level; will need a Security+, CISSP, CISA, CySA+, or CISM certification.
• Experience with the Assessment and Authorization (A&A) / Risk Management Framework (RMF) process .
• Knowledge of federal requirements: NIST SP 800-53, CNSSI 1253. FIPPS199 and FIPS 200, ECSM 018, etc

Preferred Qualifications:

• USMC or Navy Validator certified or trained.
• An analytical mind with excellent problem-solving ability.
• Strong understanding and experience of using Enterprise Mission Assurance Support Service (eMASS). i.e. importing, exporting, conducting validation efforts within RMF Step 4.
• Good communication skills and have good interpersonal, organizational, and analytical skills.

Clearance Requirements:

• Must have a current/active Secret clearance with the ability to obtain Top Secret.

Physical Requirements:

• This job largely operates in a professional office environment.
• Ability to sit for extended periods of time.