Work Status: Full-Time, on-site

Location: Coronado, CA

Clearance: Secret

Requisition Number: IASE-002-CUSD

Summary:

The Information Assurance Systems Engineer will provide systems support for all Stand-alone networks, Stand-alone computers, and related systems.  The position will include experience with Compliance Scans, Assured Compliance Assessment Solution (ACAS) Administration Per Non-POR Network and stand-alone Systems, McAfee Host Based Security System (HBSS) system administration and configuration policy, Secure Configuration Compliance Validation Initiative (SCCVI) Administration, STIG/SSR Validation, Vulnerability Management System (VMS) and Vulnerability Remediation Asset Manager, (VRAM) Administration, Online Compliance Reporting System (OCRS) information Assurance Vulnerability Alerts/Bulletin's (IAVA/8) Communication Tasking Order (CTO) Online Compliance Reporting System (OCRS) information Assurance Vulnerability Alerts/Bulletin's (IAVNB), Communication Tasking Order (CTO).

Responsibilities:

• Conduct security assessments of system security plans to help ensure that plans provide security controls for information systems that meet stated security requirements.
• Conduct comprehensive assessments of the management, operational, and technical security controls employed within or inherited by an information system to determine the overall effectiveness of the controls.
• Ensure compliance of security configurations for IT systems and aid in providing clear and concise processes and procedures for the implementation and enforcement of system security configurations.
• Provide assessments of the severity of weaknesses or deficiencies discovered in the information system and its environment of operation and recommend corrective actions to address identified vulnerabilities and prepare the security assessment reports containing the results and findings from system security assessments.

Requirements:

• Demonstrated knowledge and experience of IA/INFOSEC concepts and requirements: Firewall Policy, Ports & Protocols, Cybersecurity, Cybersafe.
• System/network vulnerability analysis experience.
• Risk assessment and risk mitigation analysis experience.
• Security Test and Evaluation (ST&E) experience.
• Knowledge and experience of the Defense Information Systems Agency published Security Technical Information Guidance (STIG) requirements and implementation/compliance process.
• Knowledge of virtualization, networking, Windows and Linux Operating Systems, and storage and backup.
• Possess strong oral and technical writing skills.
• Possess extensive knowledge of the US Government Information Assurance Security Processes.
• Knowledge of Information Assurance policies and procedures, and processes are also desired.
• Practical experience in Cybersecurity, Engineering, T&E or A&A.

Education: 

• Bachelor's degree or AA/AS in Information Assurance or InfoSec field.
• Three years of experience with the following Tactical Training Group Pacific (TTGP) systems, preferred: security system known as FREEDOM, NATO stand-a-lone computer; Clock System; EMS System; Camera System; Engraving System; Inventory Scanner (WASP) System; TMPC classroom training network; Quick Pick – SD.

Salary:   $85,000

Work Status: Full-Time

Location: San Diego, CA

Clearance: Secret

Requisition Number: MCA-002-SD

Summary

The Management-Case Analyst will be responsible for collecting, reviewing, and analyzing data. From their expert analysis, the Management-Case Analyst will develop solutions and make recommendations to the client.

Responsibilities

• Analyze relevant data, which may include annual revenues, employment, cost performance, schedule or expenditures.
• Define the nature and extent of problems. Develop solutions to problems.
• Collect, review, and analyze information in order to make recommendations to the Government.
• Interview managers and employees while observing their operations.
• In the course of preparing recommendations, understand the nature of the organization, the relationship it has with others in the Government, and its internal organization and culture.
• Prepare and solve mathematical models.
• Report findings and recommendations to the Government.
• Reports are usually submitted in writing, but oral presentations regarding findings also are common.
• For some projects, the Management-Case Analyst will assist in implementing the suggestions they have made.

Requirements

• Five to seven years of work-related experience.
• Bachelor’s degree.
• Strong analytical, planning, and organization skills.
• Advance level of Microsoft Office Suite.

Salary

$135,000 - $145,000

Work Status:  Full-Time

Location:  San Diego

Security Clearance:  Secret

Requisition Number: SE-002ZH

Job Summary

As a Systems Engineer, you will work on a multi-disciplinary team and provide hands-on technical support to USS Naval Ships both on and offboard ships. The support includes answering helpdesk tickets, and travelling to ships located CONUS and OCONUS to conduct troubleshooting efforts in support of CASREPS, as well as installation of all Global Command and Control Systems Maritime currently in the Program of Record.

Responsibilities

• Create and review help desk tickets within Helix tracking system for Casualty Reports (CASREPs) and other issues for Command, Control, Communications, Computers, and Intelligence (C4I) systems regarding Program of Record (PoR) customers.
• Provide troubleshooting services for PoR customers via distance support.
• Evaluate and identify deficiencies and conduct corrective actions to resolve issues for software, interfaces, and networks for all C4I systems including, but not limited to GCCS-M FL 4.1.1.1, GCCS-M GL 4.1.2.1, GCCS-M 4.1.5.0 products, C2PC, Link 11, and additional C4I system peripherals for PoR customers. The support efforts include the analysis, resolution, and documentation of operational system issues relating to the C4I products.
• Provide product support for the operation, maintenance, installation, and upgrade of C4I systems onboard USS Naval Vessels.
• Support the operation and administration of heterogeneous C4I systems consisting of PCs, workstations, servers, Local Area Network (LANs), and communications devices.
• Analyze, identify, and implement Commercial off the Shelf (COTS) and Government off the Shelf (GOTS) products that assist in system administration function.

Requirements:

• Must have 1-3 years of experience in system installation and check-out for both ashore and afloat C4I systems.
• Three to five years of experience in system user training of Fleet personnel.
• A minimum of 1-3 years of experience working in a laboratory and on-site installations is desirable, as well as experience with SOLARIS, WindowsNT OS and Virtualized environments (i.e., VMWare).
• Knowledge of existing DoD communications systems and sensor as applied to C4I.
• One to three years of networking experience including installation and maintenance.
• At lease 1-3 years of experience with System Administration of Solaris and WindowsNT systems in virtualized and non-virtualized environments.
• Must have, or be able to obtain, Information Assurance Technical (IAT) Level II certifications for two operating systems (Windows, Unix, Linux).
• Must be willing to travel up to 50%.

Education:

• High School Diploma or equivalent

Salary:  $75,000 - $95,000

Work Status: Full-Time

Location: San Diego, CA

Clearance: Secret

Requisition Number: SE-001

Summary:

As an engineer on our team, you’ll work with ODME Solution's colleagues and the U.S. Navy to develop, integrate, and deploy updates to prevent cyberattacks and provide critical information to our warfighters helping them defeat our enemies. You will work with engineering leadership and program management to build trust with the customer. You will not only architect, engineer, integrate, test and deploy these systems, but also identify areas requiring urgent mitigation up front, and early to develop this system with advanced technology solutions. 

Responsibilities:

• Perform Support services to users.
• Maintain and update documentation and comply with rules and guidelines of the organization. 
• Adherence to strict change control procedures.
• Troubleshoot remote systems and work with users to get them up and running via Phone, Chat, or via remote access tools. 

Requirements:

• Three or more years of IT Experience (Desktop Support, Systems Engineering, Systems Administration).
• End User Support / Desktop Support: Microsoft Windows, Microsoft Office.
• Exceptional verbal and written communication skills.
• Ability to balance projects, support tickets, and R&D initiatives.
• Strong knowledge of Microsoft Windows Server Platforms as well as Active Directory, Group Policy.
• Understanding of virtualization platforms such as VMware or Hyper-V.
• Understanding of networking: TCP/IP, LAN / DMZ / WAN, DHCP, DNS, Routing, Switching and Firewalls. 
• Ability and willingness to travel is required. 
• The candidate must be able to complete all physical requirements of the job, which include but are not limited to, the following: must be able to lift and/or carry up to 50 lbs.; stand/sit for extended periods of time; push/pull; climb stairs; stoop, kneel or crouch; use fingers/hands to handle or feel; reach above head or below knee level; and the ability to work around machinery and material handling equipment.
• Security +, OS certification (Windows Preferred)

Salary: $75,000 - $110,000

Work Status:  Full-Time

Location:  San Diego

Security Clearance:  Secret

Requisition Number: SSDEDO-002

Job Summary:

As a Senior Software Development Engineer with DevOps Experience you will work on a multi-disciplinary team and provide hands-on technical support to integrate software tools capable of mission data processing into a Cloud environment. Additionally, the candidate must have strong experience using DevOps tools and processes.

Required Experience: 

• Experience with cloud developing and hosting on AWS (preferred) or Azure
• Experience with cloud infrastructure tools such as Kubernetes, Rancher, ArgoCD, Argo Workflows, PCF/Tanzu, Helm
• Experience using DevSecOps tools such as GitLab, GitOps, Bitbucket, CI/CD Pipelines, Docker, Fortify, Sonarqube, Chef/Ansible, Terraform, Nexus, Jenkins
• Experience developing in Java and writing scripts
• Ability to innovate, evaluate and research new technologies while staying abreast of industry trends
• Motivated individual with strong problem-solving abilities
• Able to deliver in agile sprint cycles
• The ability to engage constructively with peers and technical lead to communicate the technical approach, trade-offs, and technical decisions
• Effective communication skills (both verbal and written)
• Highly motivated and able to work well in both team and solo settings
• Excellent team player who is willing to contribute in any capacity

Salary:  $125,000 - $155,000

Work Status:  Full-Time

Location:  Philadelphia, PA

Security Clearance:  Secret

Requisition Number:  CU-ISS-III-ISSO-001

Job Summary:

The Information Systems Security III Specialist will support efforts to integrate new technology with IT security standards, technical writing, governance, and policy development/management required to develop, evaluate Information Assurance Assessment and Authorization (A&A) for servers and systems, and validation for systems.

Responsibilities:

• Research and recommend any corrections of CS non-compliance findings.
• Review and analyze network security requirements, network design, and software and hardware, as well as analysis to ensure security controls are implemented in compliance with CS policies and standards.
• Ensure accreditation and authorization packages for systems within the assigned technical department are developed, maintained, and updated.
• Work with the ISSM to tailor the delivery of Cybersecurity Program elements, such as accreditation requirements and strategies, to ensure effective dissemination and implementation within the assigned technical department.
• Ensure information systems are operated, used, maintained, and disposed of in accordance with security policies and practices as required by the authorization package.
• Manage and implement the cybersecurity process, and oversee weekly documentation in accordance with the Risk Management Framework (RMF) to obtain assigned system’s, enclaves, and boundaries Authority to Operate (ATO).
• Track and report on production of system cybersecurity artifacts and status of cybersecurity Assessment & Authorization (A&A) efforts.
• Examine system services and provide guidance to users in assigned department on disabling services, review vulnerability findings with SMEs to determine potential impact of remediation efforts, and devise system remediation and associated test procedures based on vulnerability scan results, STIG findings, and review of system services.

Requirements:

• Eight years of experience coordinating with various levels of an organization to enact required security changes to ensure compliance with published policies; conducting cybersecurity vulnerability and threat analysis; and support cyber incident-response by isolating potentially effected assets, initial investigation and data collection, through status updates/reporting.
• CAP, GSLC, Security+ CE
• Master’s degree in computer science, information technology, or an equivalent technical degree from an accredited college or university.

Work Status:  Full-Time

Location:  Philadelphia, PA

Security Clearance:  Secret

Requisition Number:  CU-TWS-001

Job Summary:

The Technical Writer will support efforts to integrate new technology with IT security standards, technical writing, governance, and policy development/management required to develop, evaluate Information Assurance Assessment and Authorization (A&A) for servers and systems, and validation for DoD C4I systems.

Responsibilities:

• Provide Cybersecurity Subject Matter Expertise for high level policies or strategies for Cybersecurity (CS) as guided by the Government.
• Write technical documentation such as user manuals, reports, documentation, presentations, proposals, outlines, and summaries, and provide weekly updates regarding assigned projects and tasks including percentage of completion, concerns/issues.
• Provide consultation, guidance and portfolio management for systems and software in compliance with Navy, DoD and federal requirements and policies.
• Provide support for CS Program activities including development and maintenance of Plans of Action & Milestones (POA&Ms); tracking status.
• Prepares presentations and final deliverable reports, as required.

Requirements:

• Bachelor's degree in computer science, information technology, or an equivalent technical degree from an accredited college or university.
• Security: IAM-II via applicable certification such as CAP, CASP+ CE, CISM, CISSP (or Associate), GSLC, CCISO.

Work Status:  Full-Time

Location:  Philadelphia, PA

Security Clearance:  Secret

Requisition Number:  CU-ISS-III-CA-001

Job Summary:

The Information Systems Security III will support efforts to integrate new technology with IT security standards, technical writing, governance, and policy development/management. The Information Systems Security III will also be required to develop and evaluate Information Assurance Assessment and Authorization for servers and systems, and validation for systems.

Responsibilities:

• Perform analysis of logs, events, and reporting of various data collections tools including: vulnerability monitoring via Assured Compliance Assessment System and related tools, Host Based Security Systems, web content filters, Security Information and event management (SIEM), firewall systems, network devices, server devices, workstations, and intrusion detection and prevention systems (ID/PS).
• Automate processes through scripting and collect, organize, summarize and report on various data sets and produce professional and impactful metrics and reports, create presentations, proposals, outlines, and summaries.
• Assess impacts from observed risks and report via the Cybersecurity Program chain of command.
• Present data to management, developing reports, and producing procedural documentation in a comprehensive and cohesive manner.
• Perform the evaluation of system administrator, security engineer, and/or system owner proposed corrections to ensure compliance and best-fit solution.
• Attain and maintain a DOD, DON, or NAVSEA continuous inspection readiness posture.

Requirements:

• Six years of professional experience performing analysis of logs and events, and of various data collection tools; as well as experience automating processes through scripting, and assessing impacts from observed risks and present the findings through the chain-of-command.
• CAP, CASP+ CE, CISM, CISSP (or Associate), GSLC, or CCISO.
• Bachelor’s degree in Computer Science or another IT related field.

Work Status:  Full-Time

Location:  Philadelphia, PA

Security Clearance:  Secret

Requisition Number:  CU-IAC-II-001

Job Summary:

The Information Assurance Compliance II will support efforts to integrate new technology with IT security standards, technical writing, governance, and policy development/ management required to develop, evaluate Information Assurance Assessment and Authorization (A&A) for servers and systems, and validation for systems.

Responsibilities:

• Provide DoD Information Assurance Certification & Accreditation Process (DIACAP) and Risk Management Framework (RMF) services.
• Perform validation of A&A packages and artifacts; implementation of security postures.
• Follow the most current applicable documents including: DON RMF Process Guide, DoD Instruction 8510.01, and the business rules of cognizant review offices for each package.
• Perform A&A Validation including their associated validation test procedures; associated validation artifact; validation plan and procedures; compliance status; validation tests; validation results/report and supporting documentation.
• Validate the confidentiality, integrity, and availability of systems, networks, and data in accordance with information systems programs, policies, procedures and goals.
• Develop procedures to ensure information systems reliability and accessibility; prevent and defend against unauthorized systems, network and data.
• Conduct risk and vulnerability assessments of planned and installed information systems to identify vulnerabilities, risks protection needs; conduct systems security evaluation, audits, and reviews; determine the residual risk of a package based on content and assessment results and documenting for the Security Controls Assessor’s (SCA) and higher-level review.
• Conduct systems security reviews, audits, or evaluations, as appropriate, to ensure accreditation documents are accurate in the current risk posture of the system.
• Interpret and implement local information security and higher-level policies and procedures to ensure networks and information systems are reliable, accessible and protected against unauthorized access.

Requirements:

• Five years of practical experience in a cybersecurity or assessment and authorization (A&A) related field. Experience should include implementing and/or reviewing RMF and A&A lifecycle documentation in accordance with DON, DoD, NIST SP-800-37, and SP-800-53 Rev 4 policies; ensuring/validating the confidentiality, integrity, and availability of systems, networks, and information; and conducting risk and vulnerability reviews and assessments to ensure accreditation procedures were followed, and documenting non-compliance.
• CAP, GSLC, Security+ CE.
• Bachelor’s degree in computer science, information technology, or an equivalent technical degree from an accredited college or university.

Work Status:  Full-Time

Location:  Panama City, Florida

Security Clearance:  Top Secret

Requisition Number: CU-CS-NSWC-001

Job Summary:

The Cybersecurity Specialist will serve as a Qualified Validator (QV, formally Navy Qualified Validator (NQV)) and Technical Writer working closely with the Government Senior QV in the support of Naval Surface Warfare Panama City (NSWC PCD).

The Cybersecurity Specialist shall hold a Certified Information Systems Security Professional (CISSP) designation or a GIAC Security Leadership Certificate (GSLC), and meet all additional requirements to be qualified at the Mastery level for Specialty Code 612 as defined in the DoD Information Assurance Workforce per SECNAV M-5239.2, and the DON Cyberspace Information Technology and Cybersecurity Workforce Management and Qualification Manual.

Responsibilities:

• Monitor and manage risk management processes (e.g., methods for assessing and mitigating risk).
• Keep up to date on national and international laws, regulations, policies, and ethics as they relate to cybersecurity.
• Apply cybersecurity principles.
• Monitor and be aware of cyber threats and vulnerabilities.

Requirements:

• Excellent communication skills, both orally and in writing, with a wide range of professional contacts, including managers, secretaries, scientists, specialists, and technicians.
• Bachelor’s degree
• Three years of experience developing, editing, & producing technical & graphic documentation for information technology systems, desired.
• Minimum of five years of experience in interpreting and implementing Department of Defense directives, instructions, and policies that provide direction and guidance and applying them to a DoD environment, desired.
• Five years of experience working as a Navy Qualified Validator with the Navy RMF A&A process and eMASS system, desired.

Work Status:  Full-Time

Location:  Norfolk, VA

Security Clearance:  Secret

Requisition Number:  CU-ET-003

Job Summary:

The ISNS Equipment Technician will provide Integrated Shipboard Network System (ISNS) technical support services to support Command, Control, and Intelligence (C2I) efforts. The ISNS Equipment Technician will also provide technical support, system testing, inspections and assessments to assess, inspect, and correct system faults within all variants of ISNS AN/USQ-153, including associated equipment.

Responsibilities:

• Identify and correct anomalies associated with installation, operation, maintenance, and connectivity problems within all variants of ISNS AN/USQ-153.
• Provide onboard maintenance training to ship’s force technicians in the operation, repair, maintenance and logistics support of ISNS.

Requirements:

• OS Required (any of the following): Microsoft Certified Systems Administrator (MCSA), Microsoft Certified Solutions Expert (MCSE), or equivalent.
• Minimum of 5 years of hands-on experience in the troubleshooting, assessment, and repair

of the following systems (experience within the last 3 years):

• AN/USQ-153 ISNS A(V)X or,
  • AN/USQ-153 ISNS B(V)X or,
  • AN/USQ-153 ISNS C(V)X or,
  • AN/USQ-153 ISNS D(V)X
  • AN/USQ-208 CANES
• Security+ Certification
• Experience in troubleshooting, repair, and assessment on the following systems/equipment, desired:
  • Fiber Attached Storage (FAS)
  • EMC Storage/Backup Solution
  • Operation Rolling Tide (ORT)
  • Windows Server Update Service (WSUS)
  • AN/UYQ-96 Computer Network Defense/Operating System Environment (CND/OSE)
  • Host Based Security System (HBSS)
  • Naval Tactical Command Support System (NTCSS)
  • Combined Enterprise Regional Exchange Information System (CENTRIX)

Experience gained at a Mobile Technical Unit (MOTU), Fleet Technical Support Center (FTSC) or Regional Maintenance Center (RMC), desired.

Work Status: Full-Time

Location: Norfolk, VA

Clearance: Secret

Requisition Number: CUI-ET-002

Job Summary:

The Equipment Technician will provide technical support for each area: Global Command and Control - Maritime (GCCS-M), Integrated Shipboard Network System (ISNS) and Consolidated Afloat Network Enterprise Services (CANES) and assist in assessing, inspecting, and correcting system faults. The Equipment Technician will also identify and correct anomalies associated with installation, operation, maintenance, and connectivity problems.

Responsibilities:

• Identify and correct anomalies associated with installation, operation, maintenance and connectivity problems found within GCCS-M, ISNS, and CANES equipment.
• Provide onboard maintenance training to ship’s force technicians in the operation, repair, maintenance, and logistics support of ISNS.

Requirements:

• Security Required: Security+
• OS Required (any of the following): Microsoft Certified Systems Administrator (MCSA), Microsoft Certified Solutions Expert (MCSE), or equivalent.
• GCCS-M Experience -Minimum of 4 years of hands-on experience in the troubleshooting, assessment and repair of the following systems. (Experience shall have been from within the last 3 years:
  • AN/USQ-187 GCCS-M 4.1.x
  • AN/USQ-172 GCCS-M 4.0.x
• Experience in the troubleshooting, repair, and assessment on the following systems:
  • AN/USQ-151 Joint Tactical 1. Terminal (JTT)
  • AN/USQ-152 TBMCS
  • AN/USQ-188 Radiant Mercury
  • AN/USQ-208 Consolidated Afloat Network and Enterprise Services - CANES
  • Passive Link Tap (PLT)
• ISNS Experience - minimum of 5 years of hands-on experience in the troubleshooting, assessment and repair of the following systems (experience shall have been from within the last 3 years):
  • AN/USQ-153
  • 2. COMPOSE 3.5
  • 3. COMPOSE 4.0
  • 4. AN/UYQ-96 Computer Network Defense – CND
  • 5. AN/USQ-208 Consolidated Afloat Network and Enterprise Services – CANES
• Experience in the troubleshooting, repair, and assessment on the following:
  • VMWARE 3.5/4.0
  • EMC Storage Device
  • IBM Blade Centers
  • Crystal Servers
  • Alcatel 7700/6850/9700 Switches
• CANES Experience - minimum of 3 years of hands-on experience in the troubleshooting, assessment and repair in AN/USQ-208 Consolidated Afloat Network and Enterprise (experience within the last 3 years).
• Experience in the troubleshooting, repair, and assessment on the following systems:
  • SABI/1. TSABI – RADMERC
  • Blade Centers
  • VTC
  • Networker Backup Solution
  • Video Distribution System
• Experience gained at a Mobile Technical Unit (MOTU), Fleet Technical Support Center (FTSC) or Regional Maintenance Center (RMC), desired.

Work Status: Full-Time

Location: Norfolk, VA

Clearance: Secret

Requisition Number: CU-ET-001

Job Summary:

The GCCS-M Equipment Technician will provide technical support for each area Global Command and Control - Maritime (GCCS-M), Integrated Shipboard Network System (ISNS) and Consolidated Afloat Network Enterprise Services (CANES) to provide technical support and assistance to assess, inspect and correct system faults. Contractor shall identify and correct anomalies associated with installation, operation, maintenance and connectivity problems.

Responsibilities:

• Identify and correct anomalies associated with installation, operation, maintenance and connectivity problems found within GCCS-M, ISNS and CANES equipment.
• Provide onboard maintenance training to ship’s force technicians in the operation, repair, maintenance and logistics support of ISNS.

Requirements:

• Security Required: Security+
• OS required in any of the following: Microsoft Certified Systems Administrator (MCSA), Microsoft Certified Solutions Expert (MCSE), or equivalent.
• Minimum of 4 years (within the last 3 years) of GCCS-M hands-on experience in the troubleshooting, assessment and repair of AN/USQ-187 GCCS-M 4.1.x and AN/USQ-172 GCCS-M 4.0.x
• Experience in troubleshooting, repair and assessment on the AN/USQ-188 Radiant Mercury
• While not required, any experience gained at a Mobile Technical Unit (MOTU), Fleet Technical Support Center (FTSC) or Regional Maintenance Center (RMC) is desired.

Location:  San Diego, CA

Work Status:  Full-time

Clearance:  Secret

Requisition: CU-WDID-001

Position Description

The Wed and Digital Interface Designer II will work on a multi-disciplinary team and provide hands-on technical support the development and maintenance of Internet and intranet hosted websites and digital user interfaces. Because this role may involve a combination of collaborative/in-person and independent work, it may take the form of a hybrid work format, with time split between working onsite and remotely.

Duties and Responsibilities

• Develop, modify, and/or test layouts, interfaces, functionality, and navigation menus to ensure compatibility and usability across browsers or devices.
• Use web framework applications as well as the Government’s code and processes.
• Evaluate web design following web and accessibility standards, analyze web use metrics, and optimize websites for marketability and search engine ranking.
• Design, modify, and/or test interfaces that facilitate the human-computer interaction.
• Maximize the usability of digital devices, websites, and software with a focus on aesthetics and design.
• Create and/or modify graphics used in websites.
• Manage website content and links.
• Ensure webpage compliance with standards and regulations such as Section 508.

Requirements 

• Bachelor degree, preferred, but will review consider equivalent experience.
• Three years of professional experience designing digital user interfaces or websites

Salary:  $70,000-$80,000

Work Status: Full-Time

Location: Philadelphia, PA

Clearance: Secret

Requisition: CU-NQVL-01

Job Summary:

The Navy Qualified Validator Level III will support efforts to integrate new technology with IT security standards, technical writing, governance, and policy development/management. The Navy Qualified Validator Level III will also develop and evaluate Information Assurance Assessment and Authorizations (A&A) for servers and systems.

Responsibilities:

• Provide DoD Information Assurance Certification & Accreditation Process (DIACAP) and Risk Management Framework (RMF) services.
• Perform validation of A&A packages and artifacts and implementation of security postures.
• Follow the most current applicable documents including, DON RMF Process Guide, DoD Instruction 8510.01, and the business rules of cognizant review offices for each package.
• Perform A&A Validation including their associated validation test procedures; associated validation artifact; validation plan and procedures; compliance status; validation tests; validation results/report and supporting documentation.
• Create and maintain the package record in the RMF system of record (currently eMASS).
• Validate the confidentiality, integrity and availability of systems, networks, and data in accordance with information systems programs, policies, procedures, and goals.
• Develop procedures to ensure information systems’ reliability and accessibility; prevent and defend against unauthorized systems, network, and data.
• Conduct risk and vulnerability assessments of planned and installed information systems to identify vulnerabilities, risks protection needs; conduct systems security evaluation, audits, and reviews; determine the residual risk of a package based on content and assessment results and documenting for the Security Controls Assessor’s (SCA) and higher-level review.
• Conduct systems security reviews, audits, or evaluations, as appropriate, to ensure accreditation documents are accurate and state the current risk posture of the system.
• Interpret and implement local information security and higher-level policies and procedures to ensure networks and information systems are reliable, accessible, and protected against unauthorized access.

Requirements:

• Seven years of practical experience in a cybersecurity or A&A related field. Experience should include implementing and/or reviewing RMF lifecycle documentation; ensuring/validating the confidentiality, integrity, and availability of systems, networks, and information; and conducting risk and vulnerability reviews and assessments to ensure accreditation procedures were followed, and documentation of non-compliance.
• Security: IAM-III via applicable certification such as CISM, CISSP (or Associate), GSLC, CCISO.

Education:

Master’s degree in computer science, information technology, or an equivalent technical degree from an accredited college or university.