What are the responsibilities and job description for the Navy Qualified Validator (NQV) position at AERMOR LLC?
AERMOR is hiring a Senior Cybersecurity - Navy Qualified Validator (NQV) to support the Government Senior Validator and A&A Lead facilitating all accreditation efforts for the Naval Surface Warfare Center - Panama City Division (NSWC - PCD) core networks, labs and associated systems.
The selected individual will create and track RMF A&A packages in the eMASS system which will include assessing and documenting RMF Security Controls, compliance with STIGs, and assessments generated by the ACAS, distilling vulnerability information into the eMASS POAM and a Risk Assessment Report, creating and updating System Life-Cycle Management Plans, System Assessment Plans, and other pertinent A&A documentation, using the NAVSEA RMF SOPs.
The work performed will be on-site (government facility) in Panama City, FL. This is not a remote nor hybrid role.
Responsibilities include:
Qualifying Requirements:
Certifications/Education:
The selected individual will create and track RMF A&A packages in the eMASS system which will include assessing and documenting RMF Security Controls, compliance with STIGs, and assessments generated by the ACAS, distilling vulnerability information into the eMASS POAM and a Risk Assessment Report, creating and updating System Life-Cycle Management Plans, System Assessment Plans, and other pertinent A&A documentation, using the NAVSEA RMF SOPs.
The work performed will be on-site (government facility) in Panama City, FL. This is not a remote nor hybrid role.
Responsibilities include:
- Collect and organize required information and preparation of RDT&E network, lab, and system level RMF A&A packages in the DON eMASS system, user manuals, training materials, installation guides, proposals, and reports
- Edit functional descriptions, system specifications, user’s manuals, special reports, or any other customer deliverables and documents as required.
- Prepare and edit documentation incorporating information provided by users, specialists, analysts, programmers and management personnel
- Write, edit and prepare graphics and presentations of technical information for both technical and non-technical personnel
- Interpret technical documentation standards and prepare documentation accordingly
- Ensure all documents are technically accurate, grammatically correct, spell checked and professionally formatted.
Qualifying Requirements:
- Must currently possess a U.S. Government issued, Secret Level Security Clearance, as this is required for consideration
- 5-years of experience in DoD Risk Management Framework (RMF) and Information Assurance (IA) security compliance policies, programs, processes, and metrics
- 1-year of experience supporting Navy A&A process in the eMASS system
- Experience with the Navy’s Risk Management Framework processes, and timelines
- Experience with Enterprise Mission Assurance Support Service (eMASS) for entry and maintenance of RMF packages
- Ability to analyze Information Assurance Vulnerability Alert (IAVA) requirements to determine applicability to existing systems
- Ability to read and understand Standard Technical Implementation Guides (STIG) and use the information to generate technically sound mitigation statements
- Experience with Navy/NAVSEA RMF tools, such as eMASSTER, EvaluateSTIG, and STIGMaster
- Proficient in MS Office Suite (Outlook, Word and Excel) and Adobe Pro
Certifications/Education:
- Bachelor’s degree in information systems management, Information Assurance, Information Technology, Computer Science or related field
- In lieu of a degree, the candidate must have 7 years of practical experience of Navy A&A to include testing and evaluation and RMF experience and familiarity with the validator role
- Obtained at least one of the following certifications:
- DoD IAT Level II/III OR IAM Level III
