Why this role stands out
This hybrid role offers a significant opportunity to directly impact Navy system security as an independent assessor, developing your expertise in RMF and cybersecurity validation. If you are a detail-oriented cybersecurity professional with a strong understanding of NIST 800-53 and a desire to provide critical, trusted recommendations, this position offers exciting challenges and growth. Apply today to leverage your security clearance and make a tangible difference.
Quick overview
Job description
Job Description: Position Overview ORBIS is seeking a Cybersecurity Lead / RMF Team Lead to serve as an independent, third-party assessor for the NSWC Corona CCAM contract. The NQV Level III is a critical oversight role responsible for evaluating the security posture of Navy systems and providing trusted recommendations to the Navy Security Control Assessor (SCA). The successful candidate will ensure that system security controls are implemented correctly and effectively to mitigate risk to Navy operations.
Validation & Assessment Responsibilities
- Execute independent, comprehensive assessments of complex IT, PIT, and Operational Technology (OT) systems against DoD, DON, and NAVSEA cybersecurity standards.
- Maintain strict separation of duties, ensuring complete independence from the system engineering, ISSM, and ISSO functions during the validation process.
- Act as a Trusted Agent to the Navy SCA and SCA Liaison (SCAL), providing objective, risk-based recommendations regarding system authorizations.
- Perform detailed reviews of System Security Plans (SSPs), architecture diagrams, data flow diagrams, and hardware/software baselines for accuracy and completeness.
- Validate the implementation of NIST 800-53 security controls by reviewing test evidence, interviewing personnel, and directly observing system configurations.
- Analyze automated vulnerability scanning results (ACAS), STIG checklists, and manual test data to verify compliance and identify residual risks.
- Generate and finalize the Security Assessment Report (SAR) and Risk Assessment Report (RAR), clearly articulating the operational impact of unmitigated vulnerabilities.
- Review and validate the accuracy of Plan of Action and Milestones (POA&M) entries, ensuring proposed mitigations are technically sound and appropriately resourced.
- Conduct extensive reviews within eMASS, updating the validation status of individual controls and the overall package prior to SCA submission.
- Provide continuous feedback and mentorship to ISSMs and ISSOs regarding the quality of package artifacts and the proper interpretation of security controls.
- Support continuous monitoring efforts by validating the closure of POA&M items, assessing the impact of system upgrades, and reviewing annual security control assessments.
- Maintain active registration on the official Navy Qualified Validators registry and comply with all ongoing training and professional development requirements.
Required Qualifications & Clearances
- Clearance: Must possess an active, TS/SCI and be a United States citizen.
- Education: Bachelor's degree in Computer Science, Information Assurance, Cybersecurity, or a related STEM field from an accredited institution.
- Experience: A minimum of seven (7) years of experience in cybersecurity, with at least four (4) years directly involved in executing RMF assessments or validations for the DoD.
- Certifications (NQV): Must hold a current, active Navy Qualified Validator (NQV) Level III certification and provide formal documentation/appointment letters.
- Certifications (DoD 8570): Must maintain an active IAM Level II or Level III baseline certification (e.g., CAP, CASP+ CE, CISM, CISSP).
- Deep technical expertise in interpreting vulnerability data, network traffic analysis, and cryptographic implementations.
- Proven ability to write comprehensive, technically accurate, and highly detailed risk assessment reports for senior government consumption.
Preferred Qualifications
- Active Top Secret clearance.
- Prior experience validating tactical combat systems, weapons systems, or specialized hull, mechanical, and electrical (HM&E) systems.
- Experience participating in Navy Cybersecurity Inspection and Certification Program (CSICP) or Command Cyber Readiness Inspections (CCRI).
Similar jobs
- SG

Detection EngineerNew
S&P Global · New York, NY · Hybrid 🇺🇸
Engineering$140k - $155k/yr13 hours ago - BA

Information Security Risk SpecialistNew
BOOZ, ALLEN & HAMILTON, INC. · Oklahoma City, OK · On-site 🇺🇸
Administrative$99k - $225k/yr13 hours ago - BA

System Security Engineer
BOOZ, ALLEN & HAMILTON, INC. · McLean, VA · On-site 🇺🇸
ConfluenceJiraTechnology$69.4k - $158k/yr4 weeks ago - LT

Senior Specialist, Industrial Security (CSSO)New
L3Harris Technologies · Rochester, New York · Hybrid 🇺🇸
Background ChecksCompliance$76.5k - $141.5k/yr2 hours ago - AI

Staff Product Security EngineerNew Auto Apply
Airwallex · US - San Francisco · Hybrid 🇺🇸
GCPGoogle WorkspaceSplunk+9TechnologySalary not listed11 hours ago - MO

Security Engineer, Device/HardwareNew Auto Apply
Motive · Hybrid - Austin · Hybrid 🇺🇸
Embedded SystemsC++IoT+2TechnologySalary not listed12 hours ago - RA

Sr. Security EngineerNew Auto Apply
Rainmaker · El Segundo · Hybrid 🇺🇸
OnboardingGoogle WorkspaceGit+7TechnologySalary not listed7 hours ago - TS
Senior Vulnerability ResearcherNew Auto Apply
Two Six Technologies · Dayton · Hybrid 🇺🇸
5GEmbedded SystemsTCP/IP+4TechnologySalary not listed11 hours ago - TS
Lead Vulnerability ResearcherNew Auto Apply
Two Six Technologies · Dayton · Hybrid 🇺🇸
5GTCP/IPAssembly+1TechnologySalary not listed11 hours ago - MR
Sr. Security EngineerNew Auto Apply
Make Rain · El Segundo · On-site 🇺🇸
Technology$128k - $225k/yr7 hours ago - LT

Experienced, Cyber IntelligenceNew
L3Harris Technologies · Northampton, Massachusetts · On-site 🇺🇸
EncryptionAccount ManagementAuditing+2Technology$92.5k - $171.5k/yr5 hours ago - LT

Sr. Associate, Cyber Infrastructure Systems Engineer - Systems AdministratorNew
L3Harris Technologies · Colorado Springs, Colorado · Hybrid 🇺🇸
DockerMicroservicesVMware+2Technology$70.5k - $130.5k/yr5 hours ago
