Navy Qualified Validator (NQV)

Location: Norfolk, VA
Position Type: Full-Time
Clearance: Eligibility for TS/SCI required


AERMOR is seeking an experienced Navy Qualified Validator (NQV) who will conduct independent, comprehensive assessments of management, operational, and technical security controls to determine overall control effectiveness and improve operational security posture in accordance with the Risk Management Framework (RMF) and Navy Assessment & Authorization (A&A) guidance.



Key Responsibilities:

• Serve independently as a Navy Qualified Validator (NQV) performing RMF validation activities using Navy SCA–approved processes.
• Conduct Validation and Risk Assessment (RA) activities, including:
  • Validation Security Assessment Testing (VSAT)
  • System risk documentation
  • System audits
  • Security hardware and software testing
• Develop, review, and deliver all RMF artifacts and documentation required to plan, execute, and report on system security assessments.
• Produce complete, accurate, and defensible risk assessments in support of RMF efforts.
• Apply Navy A&A guidance and policy to support authorization decisions, vulnerability remediation, and determination of system risk posture.
• Actively support and coordinate with the Information Systems Security Manager (ISSM).
• Engage with Information Systems Security Engineers (ISSEs) and support staff throughout the RMF lifecycle.
• Execute and analyze ACAS vulnerability scans and other DoD-approved tools to validate security control implementation.
• Participate in technical meetings to support RMF package development and authorization objectives.
• Maintain current knowledge of RMF, A&A processes, DoD, and Navy cybersecurity policy.
• Work collaboratively with system owners, technical leads, cybersecurity staff, and other stakeholders.
• Exercise strong customer service and communication skills in a fast-paced operational environment.
• Adhere to guidance outlined in the RMF Process Guide and Risk Assessment Guide.

Required Qualifications:

• Minimum 8 years of experience serving as a Navy Qualified Validator (NQV).
• Proficiency with eMASS.
• Familiarity with DoD Application and Database Management System (DADMS).
• Thorough understanding of NIST SP 800-53 security controls.
• Working knowledge of DoD and DoN network architectures and cybersecurity policy.

Required Certification:

Must possess at least ONE of the following certifications:

• Certified Chief Information Security Officer (CCISO)
• Certified Information Security Manager (CISM)
• Certified Information Systems Auditor (CISA)
• Certified Information Systems Security Officer (CISSO)
• Certified Information Systems Security Professional (CISSP)
• Certified Penetration Testing Engineer (CPTE)
• CompTIA Cybersecurity Analyst (CySA+)
• Federal IT Security Professional – Auditor-NG (FITSP-A)
• GIAC Cloud Security Automation (GCSA)
• GIAC Security Essentials Certification (GSEC)
• GIAC Security Leadership Certification (GSLC)
• GIAC Systems and Network Auditor (GSNA)
• Information Systems Security Engineering Professional (ISSEP)