We are seeking a Risk Management Framework (RMFW) Validator to join our team! This is a contractor position which will last until the end of August. It could be extended. This position requires an Active SECRET Clearance. Responsibilities: Plan, implement, upgrade and monitor security measures for the protection of computer networks and information. Ensure appropriate security controls are in place that safeguard digital files and vital electronic infrastructure Respond to computer security breaches and viruses. Certification. At a minimum, provide IAT Level II certified contractors (IAM Level III preferred). Complete Security Validation Testing with a combination of techniques, automated scripts, manual technical evaluation, interviews, document reviews, facility walk through, etc. As a result of the assessment each test shall be marked as compliant or noncompliant. In all cases SkyCom shall document the specific criteria that resulted in a compliant/non-compliant value. Automated tools will likely produce this information by default. However, when automated tools are not used; during interviews, control assessments, manual checks and walkthrough, etc. SkyCom shall be required to produce this information in the required format. Provide Guidance to Shore Sensor System Platform (3SP) Program Manager and Information Systems Security Manager (ISSM). Provide Mitigation Recommendations to the 3SP Program Manager and ISSM Provide Recommendations on Plan of Action and Milestones (POAM) items Participate in Checkpoint Collaboration Discussions Conduct All Validation Activities Described in the Navy Authorizing Official (AO). Conduct Validation Activities IAW the Navy Testing Guidance Participate in providing response to Navy Security Control Assessor (SCA) and NY Document Validation and required artifact in eMASS. Complete validation activities and artifacts. ​Qualifications: Must have an Active SECRET Clearance or higher. Certification. At a minimum, provide IAT Level II certified contractors (IAM Level III preferred).
Three to ten years of experience in Information Security.
Must be compliant with the requirements set forth by DoDD 8140.01 and SECNAV M-5239.2.
Previous experience in network security or other related fields
Knowledge of network security technologies and devices
Excellent root cause analysis skills
Strong attention to detail