RMF Validator – DoD Cybersecurity Assessments

KBR Careers; Washington (District of Columbia); On-site; USD 156,000 - 234,000; Full time

Benefits offered by this job

401K with company match

Medical, dental, vision

Paid time off

Flexible work schedule

Job summary

KBR is seeking multiple Validators to support the Naval Research Laboratory in Washington, DC. You will perform RMF validation and documentation work to obtain Authority to Operate (ATO) aligned with Navy RPG and NAVWAR risk assessments.

Responsibilities include independent security control assessments, documentation review (SSP/SAR/POA&M), and validation of controls per NIST SP 800-53. The role requires strong RMF experience and DoD cybersecurity exposure.

Qualifications

• U.S. citizenship and DoD security clearance.
• BS/BA degree with 10+ years related experience; 8 years if no degree.
• Experience with RMF and tools like eMASS.
• Experience in cybersecurity for cloud environments.
• Knowledge of NIST SPs and A&A processes.

Responsibilities

• Conduct independent RMF control assessments per NIST standards.
• Review RMF documentation (SSP, SAR, POA&M) for alignment with DoD policies.
• Validate RMF controls and ensure artifacts are ready for NAO/FAO review.
• Assess security controls per NIST SP 800-53 and CNSSI 1253; perform vulnerability scanning and testing.
• Identify risks and document remediation strategies.
• Support Navy ASRs and SLCM validations.
• Liaise as FSCA-L as needed and ensure documentation alignment.

Skills

RMF experience

eMASS exposure

Cybersecurity

NIST knowledge

A&A knowledge

Education

BS/BA degree

10+ years related experience

8 years experience in lieu of degree

Tools

eMASS

Job description

KBR is seeking multiple Validators to support the Naval Research Laboratory in Washington, DC. You will perform RMF validation and documentation work to obtain Authority to Operate (ATO) aligned with Navy RPG and NAVWAR risk assessments.

Responsibilities include independent security control assessments, documentation review (SSP/SAR/POA&M), and validation of controls per NIST SP 800-53. The role requires strong RMF experience and DoD cybersecurity exposure.