Navy Qualified Validator / Cyber Technician

KMS Solutions, LLC; Washington (District of Columbia); Hybrid; USD 110,000 - 160,000; Full time

Benefits offered by this job

Medical, dental & vision

401k / retirement plan

Paid holidays & PTO

Tuition reimbursement

Job summary

KMS Solutions, LLC is seeking a Navy Qualified Validator (NQV) / Cyber Security Technician to assist in RMF implementation for AO and A&A services. You will conduct cybersecurity and risk assessments on PIT/ICS, identifying vulnerabilities and supporting remediation under RMF guidelines.

The role requires a DoD Secret clearance, a CS/engineering degree, and RMF/NIST 800-53 experience. Telework up to 25% is possible; frequent collaboration with DoD programs is expected.

Qualifications

• A DoD Secret clearance is required.
• BA or BS degree in Computer Science/Engineering or related technical discipline.
• IAT Level 2 certification or higher (e.g. Security+, CASP, CISSP).
• 5+ years of experience with DoD Security Control Assessments, DIACAP/RMF.
• Familiarity with ACAS, Nessus, STIGs and SRGs; RMF/NIST SP 800-53 knowledge.

Responsibilities

• Assess and document risk and perform security control assessments in eMASS.
• Assist with eMASS data entry and population; recommend corrections.
• Perform NQV Level II duties within RMF processes and artifacts.
• Apply knowledge to assess RMF compliance for Assess Only systems.
• Ensure traceability of vulnerabilities from assessment to POA&M.
• Support the continuous monitoring program as needed.

Skills

Strong communication

Team collaboration

MS Office proficiency

Attention to detail

Education

BA/BS in CS/Engineering

IAT Level 2 or higher

Navy Qualified Validator (NQV) preferred

Tools

ACAS

Nessus

STIGs/SRGs

Job description

Company Overview

KMS Solutions, LLC is a technical management / solutions company that specializes in engineering, analysis, and cyber security. Founded in 2005, KMS is a certified small business with nearly two decades of experience supporting the Department of Defense as well as many other departments and programs critical to our Nation’s security and well-being.

KMS is a three-time winner of the USA Today Top Workplaces recognizing quality workplace cultures across the United States who put their employees first. Additionally, we have received multiple Regional Top Workplace awards and Culture Excellence Awards for Compensation & Benefits, Innovation, Leadership, Purpose & Values and Work-Life Flexibility.

Position Summary

The Navy Qualified Validator (NQV) / Cyber Security Technician will be responsible for assisting in the technical implementation of the Risk Management Framework (RMF) for Assess Only (AO) and Assessment and Authorization (A&A) services. They will conduct cybersecurity and risk assessments on Platform Information Technology (PIT) and PIT control systems (Industrial Control Systems) to identify and mitigate technical and non-technical vulnerabilities

Essential Functions

Reasonable accommodations may be made to enable individuals with disabilities to perform essential functions.

• Assess and document risk, perform security control assessments, and document compliant and failed security controls in eMASS.
• Assist with eMASS data entry requirements and population. Recommend corrections to eMASS record.
• Perform duties of an NQV Level II equivalent in execution of DoN RMF processes including the completion of workflow steps in eMASS, the development of RMF artifacts (Security Plan, Security Assessment Plan, Security Assessment Report, etc.) and the completion of Security Assessments.
• Apply your demonstrated knowledge to assess compliance with NIST 800-53A Security Controls for Assess Only systems.
• Ensure traceability of all vulnerabilities from raw assessment results to the POA&M.
• Support the continuous monitoring program as necessary.

Required Education And Experience

• A DoD Secret clearance is required for this position.
• BA or BS degree in Computer Science/Engineering or related technical discipline.
• IAT Level 2 certification or higher (ex. CompTIA Security+, CASP, CISSP).
• 5 or more years of experience with DoD Security Control Assessments, Information Assurance Certification and Accreditation Process (DIACAP)/ DoD Risk Management Framework (RMF).
• Familiarity with network mapping, vulnerability scanning tools (e.g., ACAS, Nessus), and Security Technical Implementation Guides (STIGs) and Security Requirement Guides (SRGs).
• Demonstrated working knowledge of DoD Information Assurance and Cybersecurity policies, procedures and practices including the Risk Management Framework (RMF) and NIST SP 800-53.

Preferred Education And Experience

• Possess a Navy Qualified Validator Certification (NQV) and be in good standing (be on the current NQV list).
• Familiarity with US Naval systems.
• Systems Engineering experience.

Competencies

• Strong communication skills with the ability to communicate, both orally and in writing, to all levels of customer and company leadership.
• Capable of effectively working and problem solving in both independent and team environments.
• Proficient with Microsoft Office applications, specifically Word, Excel, PowerPoint, and Project.
• Thoroughness and attention to detail

Additional Eligibility Requirements

Work Authorization/Security Clearance Requirement

• This position requires the ability to obtain and/or maintain a DoD Secret Security Clearance and required access to all worksite locations. Security clearances may only be granted to U.S. citizens.
• Legally authorized to work in the United States at the time of hire and throughout employment.

Other Duties:

Please note this job posting is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.

Supervisory Responsibility:

None

Work Environment:

This job operates in a professional office environment. This role routinely uses standard office equipment such as computers, phones, and photocopiers.

Physical Demands:

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. While performing the duties of this job, the employee is regularly required to talk and hear. The employee is frequently required to stand, walk, use hands to finger, handle or feel, and reach with hands and arms. Must be able to lift up to 20 lbs.

Position Type/Expected Hours of Work:

The typical workday is eight hours in length. Some flexibility in hours is allowed, with concurrence from the supervisor. Attendance at prescheduled mandatory meetings is required. Must be available during the core work hours as determined by your contract/location and must account for the required number of hours in a pay period to maintain Full-time status.

Telework:

• Telework may be allowed up to 25% depending on client support requirements. Subject to change based on business needs.

Travel:

• Ability to travel CONUS; potential to travel OCONUS.
• Travel up to 10%.

Benefits and Additional Compensation:

• KMS offers a competitive benefits packaging including medical, dental and vision insurances, flexible spending account, PTO, paid holidays, military leave, bereavement leave, 401k / retirement savings plan, professional development and tuition reimbursement, basic and voluntary life insurance / AD&D, short-term and long-term disability, voluntary AFLAC supplemental insurance products and employee assistance plan (EAP) program.
• Additionally, KMS offers employee referral bonuses and a discretionary annual bonus.

AAP/EEO Statement:

KMS Solutions is an Equal Employment Opportunity Employer and maintains an Aff...

#ZR