NAVY VALIDATOR LEVEL IV

TM3 Solutions, Inc.; Philadelphia (Philadelphia County); On-site; USD 120,000 - 170,000; Full time

Job summary

NSWCPD in Philadelphia seeks an experienced Navy Validator to join our Cybersecurity/IA team. The Validator will provide RMF-related support for DoD and Navy cybersecurity directives, ensuring compliance across Navy systems and networks.

Responsibilities include RMF package validation, independent security assessments, coordination with system owners and ISSMs/ISSOs, ATO/IATT support, eMASS usage, and ongoing alignment with evolving DoD regulations. Strong communication is required.

Qualifications

• US Citizen
• Bachelor's Degree in Cybersecurity, Computer Science, Information Systems, Engineering, or related field—or equivalent experience
• Fully qualified Validator Certificate from Navy CA; DoD 8570/8140 IAM/IAT Level II baseline (e.g., CAP/CASP+ CE/CISM/CISSP/GSLC/CCISO/HCISPP)
• 10 years professional experience in validation, RMF package development, or CSWF-related work for Navy/DoD
• Strong working knowledge of DoD RMF, NIST SP 800-53, DoDI 8510.01, and NAVSEA/NAVWAR cybersecurity policies
• Active Secret clearance required; TS/SCI preferred
• Excellent written and verbal communication with actionable assessment reports

Responsibilities

• Serve as primary Validator for RMF packages for NSWCPD systems
• Conduct independent security assessments of IS and PIT systems
• Review and validate SCA documentation (Security Plans, SARs, Risk Assessments)
• Coordinate with system owners, ISSMs/ISSOs and technical teams
• Support preparation and execution of ATO and IATT
• Utilize eMASS for RMF package management
• Stay current with DoD/Navy/federal regulations
• Provide briefings and findings to NSWCPD management and stakeholders

Skills

RMF knowledge and compliance

Excellent written/verbal communication

Cross-functional collaboration

Education

Bachelor's Degree in Cybersecurity/CS/IS/Engineering

Tools

eMASS

ACAS

HBSS/Nessus

Job description

ROLE AND RESPONSIBILITIES

The Naval Surface Warfare Center, Philadelphia Division (NSWCPD) seeks an experienced Navy Validator to join our Cybersecurity/Information Assurance (IA) team. The Validator will provide expert support for cybersecurity risk management framework (RMF) activities related to Navy systems and networks, ensuring operational compliance with DoD, Navy, and federal cybersecurity directives and standards.

Key Responsibilities

• Serve as primary Validator for RMF packages associated with NSWCPD systems, ensuring all documentation and artifacts meet DoD and Navy cybersecurity requirements.
• Conduct independent security assessments of Information Systems (IS) and Platform IT (PIT) systems, identifying vulnerabilities and recommending remediation strategies.
• Review and validate Security Control Assessment (SCA) documentation, including Security Plans, Security Assessment Reports, and Risk Assessment Reports.
• Coordinate with system owners, Information System Security Managers (ISSMs), Information System Security Officers (ISSOs), and technical teams to validate control implementations and recommend risk mitigations.
• Support the preparation and execution of Authorizations to Operate (ATO) and Interim Authorizations to Test (IATT), ensuring timely package submission and approval.
• Utilize eMASS (Enterprise Mission Assurance Support Service) for RMF package management, assessment, and documentation.
• Remain current with evolving DoD, Navy, and federal regulations, providing thought leadership and process improvements to NSWCPD’s cybersecurity program.
• Provide briefings, recommendations, and findings to NSWCPD management and external stakeholders as required.

QUALIFICATIONS AND EDUCATION REQUIREMENTS

• Must be US Citizen
• Education: Bachelor’s Degree in Cybersecurity, Computer Science, Information Systems, Engineering, or related field—or equivalent work experience.
• Certification: Fully Qualified Validator Certificate from the Navy Certification Authority (CA); compliance with DoD 8570/8140 IAM/IAT Level II baseline certification (e.g., CAP; CASP+ CE; CISM; CISSP (or Associate); GSLC; CCISO; or HCISPP.).
• Experience: 10 years professional experience in validation, RMF package development, or other CSWF-related work for Navy or DoD programs.
• Technical Proficiency: Strong working knowledge of DoD RMF process, NIST SP 800-53 controls, DoDI 8510.01, and NAVSEA/NAVWAR cybersecurity policies.
• Security Clearance: Active Secret clearance required; TS/SCI preferred.
• Communication Skills: Excellent written and verbal communication skills, with demonstrated experience generating clear, actionable assessment reports and documentation.

Desired Qualifications

• Experience supporting NSWCPD or similar Navy technical/engineering organizations.
• Direct experience with Navy Platform IT/Machinery Control Systems (MCS) or shipboard systems.
• Familiarity with eMASS, ACAS, HBSS, Nessus, and other cybersecurity assessment tools.
• TS/SCI Clearance.
• Process improvement or program management experience within federal cybersecurity environments.