Job Description
Overview Of Role TM3 Solutions is seeking experienced Fully Qualified Navy Validators III (FQNV3) to strengthen our team. In this critical role, you will serve as a key expert in the Navy's Risk Management Framework (RMF) processes, conducting thorough validations of information systems to ensure they meet stringent security and compliance standards. As a Fully Qualified Navy Validator III, you will assess, document, and certify the security postures of naval systems, mitigating risks and supporting accreditation decisions for mission-essential operations. This position demands a strong foundation in computer science, hands-on validation experience, and the ability to navigate complex regulatory environments. Candidates must hold or be eligible for at least a Secret-level security clearance, with potential requirements for higher classifications based on specific Navy project needs.
Role and Responsibilities
Responsibilities The Fully Qualified Navy Validator III (FQNV3) is tasked with performing independent validations of Navy information systems, ensuring adherence to DoD and Navy-specific cybersecurity policies. This role involves conducting security control assessments, preparing validation reports, and collaborating with stakeholders to achieve system authorizations. Emphasis is placed on risk analysis, compliance verification, and the application of Navy Certification Authority (CA) guidelines to safeguard sensitive data and operational integrity. Key responsibilities include:
- Conduct comprehensive security control validations for Navy systems using the Risk Management Framework (RMF), including assessing controls against NIST SP 800-53 standards and Navy-specific requirements to identify deficiencies and recommend remediations.
- Prepare detailed validation reports, artifacts, and authorization packages, such as System Security Plans (SSPs), Security Assessment Reports (SARs), and Plans of Action and Milestones (POA&Ms), to support accreditation and authorization decisions.
- Perform independent reviews and audits of system configurations, ensuring compliance with DoD 8570.1M, DIACAP-to-RMF transitions, and other relevant directives from the Navy Certification Authority (CA).
- Collaborate with system owners, information system security officers (ISSOs), and engineering teams to integrate validation findings into system development and maintenance processes, facilitating continuous monitoring and risk management.
- Analyze and mitigate cybersecurity risks by evaluating threats, vulnerabilities, and potential impacts, providing expert recommendations to enhance system resilience and security postures.
- Mentor junior validators and team members on Navy validation methodologies, best practices, and tools, fostering a culture of compliance and excellence within the organization.
- Participate in Navy CA audits, certification reviews, and compliance inspections, serving as a liaison between TM3 Solutions, government stakeholders, and external auditors to resolve issues and achieve timely authorizations.
- Stay current with evolving Navy and DoD policies, including updates to RMF processes, cybersecurity tools, and threat landscapes, and incorporate this knowledge into validation activities and team training.
- Support incident response efforts related to validation findings, including forensic analysis of security events and development of corrective actions to prevent recurrence.
- Contribute to proposal development and business capture activities by providing validation expertise for RFPs, including technical narratives, compliance strategies, and cost estimates for Navy-related contracts.
Qualifications And Education Requirements - Must be US Citizen
- Must have a Secret Security Clearance
- Education: Bachelor’s degree in computer science or a closely related field.
- Experience: Minimum of seven (7) years of professional experience in information assurance, cybersecurity validation, or related fields, with a focus on DoD or Navy environments.
- Security Clearance: Active Secret clearance required at minimum; Top Secret or higher preferred depending on project classification.
- Other Skills: Proficient in RMF tools and methodologies (e.g., eMASS, ACAS); strong analytical and documentation skills; excellent interpersonal and communication abilities for stakeholder engagement; ability to work independently in secure, high-stakes settings with potential for travel to Navy facilities.
Required Certifications
Requirements To fulfill the specialized requirements of this Navy-focused role and align with DoD standards, candidates must hold the following certifications at the time of award. These credentials validate expertise in information assurance management and Navy-specific validation processes:
- Cyber Security Workforce Framework (CSWF) Requirements: Information Assurance Management (IAM) Level II certification per DoD 8570.1M (e.g., CompTIA Security+, Certified Authorization Professional (CAP), or equivalent).
- Navy-Specific Certification: Must possess a “Fully Qualified Validator Certificate” from the Navy Certification Authority (CA), demonstrating proficiency in Navy RMF validation procedures.
- Preferred Additional Certifications: Certifications such as Certified Information Systems Security Professional (CISSP), GIAC Security Leadership Certification (GSLC), or Certified Risk and Information Systems Control (CRISC) are highly encouraged to showcase advanced knowledge in risk management and compliance.
Job Tags