Navy Qualified Validator with Security Clearance

Responsibilities

• Create and execute Security Assessment Plans (SAPs); prepare detailed Security Assessment Reports (SARs) and Executive Summaries based on assessment results.
• Confirm that all assessment artifacts are properly documented in eMASS, including non-compliant controls, POA&M entries, and vulnerability tracking.
• Perform independent technical evaluations to verify system compliance with DoD STIGs and SRGs and document deviations with risk justifications and mitigations.
• Advise ISSMs, ISSOs, and system stakeholders on risk determination, control effectiveness, and corrective action planning based on assessment outcomes.

Qualifications

• Bachelor's degree in computer science, IT, or related STEM discipline
• 10+ years of experience in cybersecurity or Assessment & Authorization (A&A), with emphasis on RMF, vulnerability analysis, and compliance assessments
• Must have an active Secret clearance
• Must be a certified Navy Qualified Validator III
• Must have one of the following IAM-II certifications:
• Certified Authorization Professional (CAP)
• CompTIA Advanced Security Practitioner (CASP+ CE)
• Certified Information Security Manager (CISM)
• Certified Information Systems Security Professional (CISSP) (or associate)
• GIAC Security Leadership Certification (GSLC)
• Certified Chief Information Security Officer (CCISO)
• HealthCare Information Security and Privacy Practitioner (HCISPP)

BlueWater Federal is an Equal Opportunity Employer

All qualified candidates will be considered without regard to race, color, religion, national origin, age, disability, sexual orientation, gender identity, status as a protected veteran, or any other characteristic protected by law.

BlueWater Federal is a VEVRAA federal contractor and we request priority referral of veterans.