RMF Validator

COLSA Corporation; Job; Sur place; EUR 80 000 - 110 000; Plein temps

Avantages offerts par ce poste

Medical benefits

Dental benefits

401(k) with company match

Paid time off

Résumé du poste

COLSA Corporation is seeking a Certified RMF Validator to support cybersecurity and RMF activities. The role involves validating security controls, documenting SARs, and ensuring compliance with DoD policies. It is contingent on contract award with an anticipated March 2027 start and potential as Key Personnel in the proposal.

The position requires a Bachelor's degree in Cybersecurity or related field, at least 5 years of relevant experience, and DoD Secret clearance. Equal opportunity employer.

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, or related field.
• Minimum of 5 years of related experience.
• Hands-on experience with security control assessment, validation/IV&V, and RMF documentation, including SARs.
• Experience supporting cybersecurity incident response, anomaly investigation, and remediation per DoD policies.
• Strong written and verbal communication skills.
• DoD Secret security clearance; US Citizenship required.

Responsabilités

• Perform validation/auditing of RMF authorization requirements per DoD guidance.
• Provide independent IV&V of system security controls and safeguards.
• Develop Security Assessment Reports (SARs) and related validation documents.
• Coordinate with Program Manager, ISSM/ISSO, User Representative, and client.
• Develop and report metrics on completion rates in the validation process.
• Provide network/security operations analysis and recommendations to senior staff.
• Recommend protections for networks, workstations, servers, and IT assets.
• Audit information security policies and procedures per security plans.
• Participate in response teams to correct anomalies per standards.

Connaissances

Security control assessment

IV&V

RMF documentation

SARs

Written communication

Verbal communication

Formation

Bachelor's degree in Cybersecurity or related field

Description du poste

COLSA is seeking a Certified RMF Validator to join our team and play a critical role in supporting cybersecurity and Risk Management Framework (RMF) activities . This position will provide expertise throughout the validation process, assessing security controls, documenting assessment results, and ensuring validation activities are performed in accordance with applicable policies and guidance.

This position is contingent upon contract award, with work anticipated to begin in March 2027. The selected candidate will be proposed as Key Personnel in accordance with proposal requirements.

• Responsible for performing validation/auditing of Unclassified RMF authorization requirements in accordance with Assessment and Authorization Processes
• Provides independent verification and validation (IV&V) of system's security controls and safeguards designed through the security engineering process
• Develops the Security Assessment Report (SAR) and other validation support requirements as required by DoW policies and guidance for the assigned system(s)
• Facilitates the coordination of the Program Manager, ISSM/ISSO, User Representative, and client agreement of the documentation
• Develops and report metrics that include the percentages of completion in every step of the validation process
• Provides network and security operations technical analysis, assessment, and recommendations to senior personnel.
• Provides recommendations for protecting networks, workstations, servers, and IT assets.
• Conducts audits to ensure information systems security policies and procedures are implemented as defined in security plans and best practices.
• Participates in response teams to ensure any anomalies are corrected in accordance with government or industry standards.

At COLSA, people are our most valuable resource and centered at our core value. We invite you to unite your talents with opportunity and be a part of our “Family of Professionals!” Learn about our employee-centric culture and benefits here: https://www.colsa.com/culture_benefits

Required Experience

• Bachelor's Degree (or higher) in Cybersecurity, Information Technology, or a relatedfield or equivalent experience
• Minimum of 5 years of related experience
• Hands-on experience with security control assessment, validation/IV&V, and RMF documentation, including development of Security Assessment Reports (SARs).
• Experience supportingcybersecurity incident response, anomaly investigation, and remediation in accordance with DoD policies and industry best practices.
• Strong written and verbal communication skills.
• DoD Secret security clearance; US Citizenship required

Preferred Qualifications

DoD 8570/8140-compliant certification such as Security+, CGRC (formerly CAP), or equivalent

Applicant selected will be subject to a government security investigation and must meet eligibility requirements for access to classified information.COLSA Corporation is an Equal Opportunity Employer, Minorities/Females/Veterans/Disabled. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, or national origin.

Salary Type

Annually

The salary range, if referenced, represents a good faith estimate. COLSA considers various factors when determining base salary offers, but not limited to, location, the role, function and associated responsibilities, a candidate's particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements.

COLSA offers a comprehensive and customizeable benefits program which includes Medical, Dental, Vision, Life Insurance, Short-Term Disability, Long-Term Disability, Accidental Death & Dismemberment, Supplemental Income Protection Programs, 401(k) with company match, Flexible Spending Accounts, Employee Assistance Program, Education & Certification Reimbursement, Employee Discount Program, Paid Time Off and Holidays.

This position will be posted for a minimum of 3 business days. If a candidate has not been selected at that time, it will continue to be posted until a suitable candidate is selected or the position is closed.