drjobs Navy Qualified Validator (NQV)

Navy Qualified Validator (NQV)

Employer Active

1 Vacancy
drjobs

Job Alert

You will be updated with latest job alerts via email
Valid email field required
Send jobs
Send me jobs like this
drjobs

Job Alert

You will be updated with latest job alerts via email

Valid email field required
Send jobs
Job Location drjobs

Norfolk - UK

Monthly Salary drjobs

Not Disclosed

drjobs

Salary Not Disclosed

Vacancy

1 Vacancy

Job Description


JOB TYPE: FULL-TIME


COMPETITIVE SALARY COMPREHENSIVE BENEFITS AND A COMPANY THAT CARES!


AUSGAR Technologies Inc. an EOE Minorities/Females/Disabled/Veterans employer is an established Service-Disabled Veteran-Owned Small Business (SDVOSB) Department of Defense government contractor with core competencies in Information Assurance Cyber Security and Systems Engineering. With offices on both the East and West coasts an inviting culture and above-standard benefits opportunity abounds for the right individual!


Navy Qualified Validator (NQV) 25-017 Norfolk Virginia


AUSGAR Technologies has an exciting opportunity for a Navy Qualified Validator (NQV) to join our team of smart and innovative technical team members working in Norfolk Virginia.


The ideal candidate will play a critical role in supporting the Risk Management Framework (RMF) Assessment and Authorization (A&A) processes for the Navy Continuous Training Environment (NCTE). The Navy Qualified Validator (NQV) will be responsible for the technical implementation of the RMF and will conduct cybersecurity and risk assessments on NCTE networks systems and applications to identify and mitigate technical and non-technical vulnerabilities.


Duties include but are not limited to:

  • Serve as a trusted agent and technical representative to the Security Control Assessor (SCA) conducting thorough technical evaluations of systems to assess compliance with assigned security controls.
  • Conduct security assessments and create RMF documentation including Security Assessment Plan (SAP) eMASS Risk Assessment Security Assessment Reports (SARs) SAP Executive Summary and SAP Body of Evidence (BOE).
  • Provide accurate assessments and document security posture capabilities and vulnerabilities.
  • Lead the creation of SAPs and SARs and develop executive summaries to convey technical findings and risk assessments to senior leadership.
  • Perform detailed risk analysis identify system vulnerabilities and provide comprehensive recommendations for risk mitigation.
  • Verify validate and document risk perform security control assessments and document compliant and failed security controls in eMASS.
  • Assess STIGs and SRGs.
  • Ensure traceability of all vulnerabilities from raw assessment results to the Plan of Action and Milestones (POA&Ms).
  • Support the continuous monitoring program as necessary.
Requirements


The physical demands and work environment described here are representative of those that must be met by an employee to successfully perform the essential functions of the job. Reasonable accommodation may be made for individuals with disabilities to perform the essential functions.

  • Must possess a Secret security clearance with the ability to obtain a Top Secret.
  • IAT Level II certificate or higher required i.e. Security CE CASP CISSP.
  • Possessing a Navy Qualified Validator Certification (NQV) in good standing is a plus.
  • Bachelors degree in Information Technology or related field (or business-related field) from an accredited college/university required advanced degree preferred.
  • 3 to 5 years of experience in cybersecurity validation risk assessment and supporting RMF A&A processes for DoD and Navy systems.
  • Hands-on experience conducting vulnerability assessment and analysis utilizing standard technologies such as Security Content Automation Protocol (SCAP) Assured Compliance Assessment Solution (ACAS)/Nessus scans and Defense Information Systems Agency (DISA) Security Technical Implementation Guide (STIG)/Security Requirements Guide (SRG).
  • Ability to read interpret and conduct traceability across architecture/topology diagrams Ports. Protocols and Service Management (PPSM) hardware/software lists and other artifacts.
  • Well-versed with the role of a validator for multiple RMF authorization types including baseline changes (use cases) Annual Security Review (ASR) Authority to Operate (ATO) Corrective Action Requests (CARs) Denial of Authorization to Operate (DATO) & HRR/HR.
  • Substantive knowledge of NIST Risk Management Framework (RMF) and the NAVWAR Risk Assessment Guide.
  • In-depth knowledge of the NIST Special Publications with focus on 800-53 and 800-37.
  • Knowledge of IT security principles and methods such as firewalls demilitarized zones and encryption standards.
  • Travel required: Approximately 10%.

Based on your qualifications you will be placed in Level I-V.


An essential qualification for this position is having a security clearance issued by the Federal Government which may require successful completion of a background check.


We use E-Verify to electronically confirm the employment eligibility of newly hired employees.


AUSGARs salary range is dependent upon a variety of factors which include experience skills education certifications and geographical location. Our salary range includes a base salary and excellent benefits package as part of our total compensation.


AUSGAR Technologies Inc. is an equal opportunity employer. If you are a qualified individual with a disability or a disabled veteran and need assistance in completing the application you have the right to request reasonable accommodation. Please e-mail us at if you are unable or limited in your ability to use or access careers page as a result of your disability.

Employment Type

Full Time

Company Industry

About Company

Report This Job
Disclaimer: Drjobpro.com is only a platform that connects job seekers and employers. Applicants are advised to conduct their own independent research into the credentials of the prospective employer.We always make certain that our clients do not endorse any request for money payments, thus we advise against sharing any personal or bank-related information with any third party. If you suspect fraud or malpractice, please contact us via contact us page.