Navy Qualified Validator with Security Clearance

BlueWater Federal Solutions; Philadelphia (Philadelphia County); On-site; USD 120,000 - 180,000; Full time

Job summary

BlueWater Federal Solutions is seeking a Navy Qualified Validator to validate RMF security controls through in-person evaluations, testing, and stakeholder interviews at NSWC Philadelphia, PA.

The role requires a Secret clearance, a Navy Validator III certification, and IAM-II certifications such as CAP, CASP+, CISM, CISSP, GSLC, CCISO, or HCISPP. Bachelor's in CS/IT or related STEM field is required, with 10+ years of cybersecurity experience.

Qualifications

• Bachelor's degree in computer science, IT, or related STEM discipline.
• 10+ years of experience in cybersecurity or Assessment & Authorization (A&A).
• Active Secret clearance required.
• Must be a Navy Qualified Validator III.
• Must hold one of the IAM-II certifications: CAP, CASP+ CE, CISM, CISSP (or associate), GSLC, CCISO, HCISPP.

Responsibilities

• Create and execute Security Assessment Plans (SAPs); prepare SARs and Executive Summaries.
• Ensure all assessment artifacts are documented in eMASS, including POA&M entries and vulnerability tracking.
• Perform independent evaluations to verify DoD RMF compliance and document deviations with risk justifications.
• Advise ISSMs, ISSOs, and stakeholders on risk determination and corrective action planning.

Skills

RMF

Vulnerability analysis

A&A

Education

Bachelor's degree in computer science, IT, or related STEM

Tools

eMASS

Job description

Job Description Overview BlueWater Federal is looking for a Navy Qualified Validator to validate implementation of RMF security controls through in-person evaluations, including testing, technical examination, and stakeholder interviews, in compliance with DoD and NAVSEA standards at the Naval Surface Warfare Center (NSWC), Philadelphia, PA

Responsibilities

• Create and execute Security Assessment Plans (SAPs); prepare detailed Security Assessment Reports (SARs) and Executive Summaries based on assessment results.
• Confirm that all assessment artifacts are properly documented in eMASS, including non-compliant controls, POA&M entries, and vulnerability tracking.
• Perform independent technical evaluations to verify system compliance with DoD STIGs and SRGs and document deviations with risk justifications and mitigations.
• Advise ISSMs, ISSOs, and system stakeholders on risk determination, control effectiveness, and corrective action planning based on assessment outcomes. Qualifications
• Bachelor's degree in computer science, IT, or related STEM discipline
• 10+ years of experience in cybersecurity or Assessment & Authorization (A&A), with emphasis on RMF, vulnerability analysis, and compliance assessments
• Must have an active Secret clearance
• Must be a certified Navy Qualified Validator III
• Must have one of the following IAM-II certifications:
• Certified Authorization Professional (CAP)
• CompTIA Advanced Security Practitioner (CASP+ CE),
• Certified Information Security Manager (CISM),
• Certified Information Systems Security Professional (CISSP) (or associate),
• GIAC Security Leadership Certification (GSLC),
• Certified Chief Information Security Officer (CCISO)
• HealthCare Information Security and Privacy Practitioner (HCISPP) BlueWater Federal is proud to be an Equal Opportunity Employer. All qualified candidates will be considered without regard to race, color, religion, national origin, age, disability, sexual orientation, gender identity, status as a protected veteran, or any other characteristic protected by law. BlueWater Federal is a VEVRAA federal contractor and we request priority referral of veterans.