BlueWater Federal is looking for a Navy Qualified Validator to validate implementation of RMF security controls through in-person evaluations, including testing, technical examination, and stakeholder interviews, in compliance with DoD and NAVSEA standards at the Naval Surface Warfare Center (NSWC), Philadelphia, PA

• Create and execute Security Assessment Plans (SAPs); prepare detailed Security Assessment Reports (SARs) and Executive Summaries based on assessment results.
• Confirm that all assessment artifacts are properly documented in eMASS, including non-compliant controls, POA&M entries, and vulnerability tracking.
• Perform independent technical evaluations to verify system compliance with DoD STIGs and SRGs and document deviations with risk justifications and mitigations.
• Advise ISSMs, ISSOs, and system stakeholders on risk determination, control effectiveness, and corrective action planning based on assessment outcomes.

• Bachelor’s degree in computer science, IT, or related STEM discipline
• 10+ years of experience in cybersecurity or Assessment & Authorization (A&A), with emphasis on RMF, vulnerability analysis, and compliance assessments
• Must have an active Secret clearance
• Must be a certified Navy Qualified Validator III
• Must have one of the following IAM-II certifications:
  • Certified Authorization Professional (CAP)
  • CompTIA Advanced Security Practitioner (CASP+ CE),
  • Certified Information Security Manager (CISM),
  • Certified Information Systems Security Professional (CISSP) (or associate),
  • GIAC Security Leadership Certification (GSLC),
  • Certified Chief Information Security Officer (CCISO)
  • HealthCare Information Security and Privacy Practitioner (HCISPP)

BlueWater Federal is proud to be an Equal Opportunity Employer.  All qualified candidates will be considered without regard to race, color, religion, national origin, age, disability, sexual orientation, gender identity, status as a protected veteran, or any other characteristic protected by law. BlueWater Federal is a VEVRAA federal contractor and we request priority referral of veterans.

• Create and execute Security Assessment Plans (SAPs); prepare detailed Security Assessment Reports (SARs) and Executive Summaries based on assessment results.
• Confirm that all assessment artifacts are properly documented in eMASS, including non-compliant controls, POA&M entries, and vulnerability tracking.
• Perform independent technical evaluations to verify system compliance with DoD STIGs and SRGs and document deviations with risk justifications and mitigations.
• Advise ISSMs, ISSOs, and system stakeholders on risk determination, control effectiveness, and corrective action planning based on assessment outcomes.

• Bachelor’s degree in computer science, IT, or related STEM discipline
• 10+ years of experience in cybersecurity or Assessment & Authorization (A&A), with emphasis on RMF, vulnerability analysis, and compliance assessments
• Must have an active Secret clearance
• Must be a certified Navy Qualified Validator III
• Must have one of the following IAM-II certifications:
  • Certified Authorization Professional (CAP)
  • CompTIA Advanced Security Practitioner (CASP+ CE),
  • Certified Information Security Manager (CISM),
  • Certified Information Systems Security Professional (CISSP) (or associate),
  • GIAC Security Leadership Certification (GSLC),
  • Certified Chief Information Security Officer (CCISO)
  • HealthCare Information Security and Privacy Practitioner (HCISPP)

BlueWater Federal is proud to be an Equal Opportunity Employer.  All qualified candidates will be considered without regard to race, color, religion, national origin, age, disability, sexual orientation, gender identity, status as a protected veteran, or any other characteristic protected by law. BlueWater Federal is a VEVRAA federal contractor and we request priority referral of veterans.