Cyber Security Specialist

Cybersecurity Specialist

We are seeking a Cybersecurity Specialist with a Fully Qualified Navy Validator IV (FQNV4) certification to support Navy cybersecurity compliance and Risk Management Framework (RMF) activities. This role serves as an independent third-party assessor responsible for validating system security controls and ensuring compliance with Navy and DoD cybersecurity standards.

Target Education: Bachelor's Degree in Computer Science from an accredited institution

Target Experience: Minimum of 10 years professional experience in:

• RMF package development
• Cybersecurity Workforce (CSWF)-related work
• Validation and assessment of information systems

Certifications Requirements:

• CSWF /DOD IAM Level III 8570 Certification (at least one of the following): CAP CASP+ CE CISM CISSP (or Associate) GSLC CCISO HCISPP

Clearance Requirements: SECRET clearance

Key Responsibilities:

• Validation & Assessment
• Perform independent third-party validation of system security controls
• Prepare and execute validation test procedures, plans, and reports (CDRL A012, A007)
• Ensure separation of duties between ISSM and Validator roles
• Register and maintain listing on the official Navy Qualified Validator registry
• Support RMF package development and compliance verification
• Develop Security Assessment Plans (SAP) in coordination with ISSE and ISSM
• Submit SAPs in accordance with Navy SCA RMF Business Rules and USN RMF Process Guide
• Evaluate discrepancies and recommend mitigation strategies (CDRL A010)
• Execute approved remediation methods including STIGs, patching, scanning, and network diagram creation
• Coordinate with ISSE and ISO to address and mitigate system weaknesses
• Determine revalidation testing requirements as needed
• Document residual risk in Security Assessment Reports (SAR) and Risk Assessment Reports (RAR)
• Ensure system compliance with Navy RMF guidelines
• Contribute to enclave-level SAR and RAR documentation, endorsed by Level II/III Validators
• Provide timely support to Validator inquiries via in-person, phone, or email
• Respond to all requests within one business day