Navy Qualified Validator

BlueWater Federal Solutions Inc.; Philadelphia (Philadelphia County); On-site; USD 120,000 - 160,000; Full time

Job summary

BlueWater Federal is looking for a Navy Qualified Validator to validate RMF security controls through in-person evaluations, testing, and stakeholder interviews at NSWC Philadelphia, PA.

The role involves creating SAPs and SARs, ensuring eMASS documentation, and performing independent evaluations of DoD STIGs/SRGs while providing risk-based recommendations to ISSMs and stakeholders.

Qualifications

• Bachelor's degree in CS/IT/STEM or related field.
• 10+ years in cybersecurity or A&A with RMF, vulnerability analysis and compliance.
• Active Secret clearance.
• Must be a Navy Qualified Validator III with IAM-II certs.

Responsibilities

• Create and execute Security Assessment Plans (SAPs) and SARs with executive summaries.
• Ensure artifacts documented in eMASS, including POA&M and vulnerabilities.
• Perform independent evaluations to verify DoD STIGs/SRGs and document deviations with risk justifications.
• Advise ISSMs/ISSOs and stakeholders on risk, control effectiveness, and corrective actions.

Skills

RMF

A&A

Security assessments

Risk analysis

Education

Bachelor's degree in computer science, IT, or related STEM discipline

Job description

United States, Pennsylvania, Philadelphia

Sep 04, 2026

Job Description Overview

BlueWater Federal is looking for a Navy Qualified Validator to validate implementation of RMF security controls through in-person evaluations, including testing, technical examination, and stakeholder interviews, in compliance with DoD and NAVSEA standards at the Naval Surface Warfare Center (NSWC), Philadelphia, PA

Responsibilities

• Create and execute Security Assessment Plans (SAPs); prepare detailed Security Assessment Reports (SARs) and Executive Summaries based on assessment results.


• Confirm that all assessment artifacts are properly documented in eMASS, including non-compliant controls, POA&M entries, and vulnerability tracking.


• Perform independent technical evaluations to verify system compliance with DoD STIGs and SRGs and document deviations with risk justifications and mitigations.


• Advise ISSMs, ISSOs, and system stakeholders on risk determination, control effectiveness, and corrective action planning based on assessment outcomes.

Qualifications

• Bachelor's degree in computer science, IT, or related STEM discipline


• 10+ years of experience in cybersecurity or Assessment & Authorization (A&A), with emphasis on RMF, vulnerability analysis, and compliance assessments


• Must have an active Secret clearance


• Must be a certified Navy Qualified Validator III


• Must have one of the following IAM-II certifications:
  
  
  
  • Certified Authorization Professional (CAP)
  
  
  • CompTIA Advanced Security Practitioner (CASP+ CE),
  
  
  • Certified Information Security Manager (CISM),
  
  
  • Certified Information Systems Security Professional (CISSP) (or associate),
  
  
  • GIAC Security Leadership Certification (GSLC),
  
  
  • Certified Chief Information Security Officer (CCISO)
  
  
  • HealthCare Information Security and Privacy Practitioner (HCISPP)
  
  
  
  

BlueWater Federal is proud to be an Equal Opportunity Employer. All qualified candidates will be considered without regard to race, color, religion, national origin, age, disability, sexual orientation, gender identity, status as a protected veteran, or any other characteristic protected by law. BlueWater Federal is a VEVRAA federal contractor and we request priority referral of veterans.