navy qualified validator iii

About the role

BlueWater Federal is looking for a Navy Qualified Validator to validate implementation of RMF security controls through in-person evaluations, including testing, technical examination, and stakeholder interviews, in compliance with DoD and NAVSEA standards at the Naval Surface Warfare Center (NSWC), Philadelphia, PA.

Responsibilities

• Create and execute Security Assessment Plans (SAPs); prepare detailed Security Assessment Reports (SARs) and Executive Summaries based on assessment results.
• Confirm that all assessment artifacts are properly documented in eMASS, including non-compliant controls, POA&M entries, and vulnerability tracking.
• Perform independent technical evaluations to verify system compliance with DoD STIGs and SRGs and document deviations with risk justifications and mitigations.
• Advise ISSMs, ISSOs, and system stakeholders on risk determination, control effectiveness, and corrective action planning based on assessment outcomes.

Qualifications

• Bachelor's degree in computer science, IT, or related STEM discipline
• 10+ years of experience in cybersecurity or Assessment & Authorization (A&A), with emphasis on RMF, vulnerability analysis, and compliance assessments
• Must have an active Secret clearance
• Must be a certified Navy Qualified Validator III
• Must have one of the following IAM-II certifications:
  • Certified Authorization Professional (CAP)
  • CompTIA Advanced Security Practitioner (CASP+ CE)
  • Certified Information Security Manager (CISM)
  • Certified Information Systems Security Professional (CISSP) (or associate)
  • GIAC Security Leadership Certification (GSLC)
  • Certified Chief Information Security Officer (CCISO)
  • HealthCare Information Security and Privacy Practitioner (HCISPP)