A&A Validator - Riverside, United States - Galapagos Federal Systems
Description
Job Title:
A&A Validator / Information System Security Engineer (ISSE)-4408
Job Location:
Riverside, CA
Job Summary
Galapagos Federal Systems LLC is seeking a highly motivated and qualified individual to fill the role of A&A Validator / Information System Security Engineer (ISSE) in NSWC Corona Division, Norco, CA
By joining our team of skilled professionals, you will play a crucial role in providing comprehensive Authorization and Accreditation (A&A) support, serving as both an Information System Security Engineer (ISSE) and a Navy Qualified Validator (NQV).
In this position, you will focus on the assessment and validation of all A&A packages within the Enterprise Mission Assurance Support Services (eMASS) framework.
Key responsibilities include validating Risk Management Framework (RMF) controls, generating all necessary authorization artifacts, conducting Assured Compliance Assessment Solution (ACAS) scans, performing Security Technical Implementation Guide (STIG) checks, and executing any other essential actions required for A&A packages.
Your expertise will be instrumental in supporting the attainment of Authorization to Operate (ATO) and Annual Security Review (ASR) requirements, aligning with the guidelines set forth by the Department of Defense Instruction (DoDI and the Risk Management Process Guide (RPG).
This role provides an exciting opportunity to contribute to the security and compliance efforts of our organization, working within a dynamic team to ensure the integrity and security of information systems.
If you are enthusiastic about information security and possess the necessary qualifications, we invite you to join us on this rewarding journey at Galapagos Federal Systems LLC.
Skills / Experience RequiredA mid-level ISSE position is required to have 3 to 5 years of practical experience in a Cybersecurity, Engineering, T&E or A&A (formerly C&A) related field
A senior-level or more specialized role will be required to have 5 to 10 years or more of relevant experience
Conduct comprehensive assessments of Authorization and Accreditation (A&A) packages within the Enterprise Mission Assurance Support Services (eMASS) framework
Serve as both an Information System Security Engineer (ISSE) and a Navy Qualified Validator (NQV), ensuring adherence to Department of Defense Instruction (DoDI and the Risk Management Process Guide (RPG)
Validate and verify Risk Management Framework (RMF) controls, ensuring that information systems meet security requirements and standards
Generate and compile all necessary authorization artifacts to support A&A processes, including documentation of security controls, risk assessments, and plans of action and milestones (POA&M)
Execute Assured Compliance Assessment Solution (ACAS) scans to identify and mitigate vulnerabilities in information systems
Perform Security Technical Implementation Guide (STIG) checks to assess and enhance the security posture of systems
Collaborate with cross-functional teams to address and resolve security-related issues identified during A&A processes
Ensure compliance with Authorization to Operate (ATO) and Annual Security Review (ASR) requirements, conducting thorough assessments and validations
Stay current with industry best practices, DoD directives, and security frameworks to continuously enhance A&A processes
Provide guidance and expertise on security measures and controls to support the overall security posture of information systems
Contribute to the development and improvement of security policies, procedures, and documentation
Collaborate with stakeholders to communicate security-related findings and recommendations effectively
Maintain a thorough understanding of emerging threats and vulnerabilities, adjusting A&A processes accordingly
Participate in continuous improvement initiatives to enhance the efficiency and effectiveness of the A&A validation process
Education / Certifications
Bachelor's degree in computer science or a related field
Work experience may be accepted in lieu of a degree
IAT Level II2 certification/DoD 8570 certifications:
CAP
CASP+ CE
CISM
CISSP (or Associate)
GSLC
CCISO
HCISPP
Benefits
Medical, dental, vision, disability, and life insurance
Flexible Spending Accounts
401(k)
PTO
Tuition reimbursement
Paid federal holidays
Security Clearance
Must be a U.S. Citizen. A high-level Department of Defense active security clearance may be required.
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to government information.
Physical RequirementsWork may involve sitting or standing for extended periods of time and typing and reading from a computer screen.
The candidate must have enough mobility, including bending, reaching, and kneeling, to complete daily duties in a prompt and efficient manner and that may include lifting to thirty pounds, as necessary.
Company Summary
Headquartered in Hawaii, Galapagos Federal Systems, LLC is an SBA Certified Native Hawaiian Organization 8(a) Small Business specializing in global information technology and offering professional solutions in IT Design & Installation, Cybersecurity Engineering & Support, Application Integration & Development, Software & Hardware Engineering, Network & Systems Management, Information Systems Security, and Business Management Services.
Leveraging over 30 years of providing IT services to the federal & commercial market with projects found around the world, our team has innovative expertise in the development of a wide range of technological solutions.
Our service commitment is simple - 'Quality IT Solutions... On Time & On Budget.'
Company Employment Statement
Galapagos Federal Systems, LLC reserves the right to change or modify job duties and assignments at any time. The above job description is not all encompassing as positions, functions, and qualifications may vary depending on business needs. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
Galapagos Federal Systems, LLC is an equal opportunity employer and does not discriminate against applicants based on race, color, creed, religion, medical condition, legally protected genetic information, national origin, sex (including pregnancy, childbirth, or related medical condition), sexual orientation, gender identity and expression, age, disability, or Vietnam era, or other eligible veteran status or legally protected characteristics.
#J-18808-Ljbffr