A&A Validator / Information System Security Engineer (ISSE)

Job Title: A&A Validator / Information System Security Engineer (ISSE)-4592

Job Location: Riverside, CA 92501

Job Summary

Galapagos Federal Systems LLC is seeking a highly motivated and qualified individual to fill the role of A&A Validator / Information System Security Engineer (ISSE) in NSWC Corona Division, Norco, CA 92860.

By joining our team of skilled professionals, you will play a crucial role in providing comprehensive Authorization and Accreditation (A&A) support, serving as both an Information System Security Engineer (ISSE) and a Navy Qualified Validator (NQV). In this position, you will focus on the assessment and validation of all A&A packages within the Enterprise Mission Assurance Support Services (eMASS) framework.

Key responsibilities include validating Risk Management Framework (RMF) controls, generating all necessary authorization artifacts, conducting Assured Compliance Assessment Solution (ACAS) scans, performing Security Technical Implementation Guide (STIG) checks, and executing any other essential actions required for A&A packages. Your expertise will be instrumental in supporting the attainment of Authorization to Operate (ATO) and Annual Security Review (ASR) requirements, aligning with the guidelines set forth by the Department of Defense Instruction (DoDI) 8510.01 and the Risk Management Process Guide (RPG).

This is a Key Personnel role that offers an exciting opportunity to contribute to the security and compliance efforts of our organization, working within a dynamic team to ensure the integrity and security of information systems. If you are enthusiastic about information security and have the necessary qualifications, we invite you to join us on this rewarding journey at Galapagos Federal Systems LLC.

Skills / Experience Required

• 7 years of practical experience in a Cybersecurity, Engineering, T&E or A&A (formerly C&A) related field as a mid-level ISSE position (required)


• Serve as both an Information System Security Engineer (ISSE) and a Navy Qualified Validator (NQV), ensuring adherence to Department of Defense Instruction (DoDI) 8510.01 and the Risk Management Process Guide (RPG)


• Conduct comprehensive assessments of Authorization and Accreditation (A&A) packages within the Enterprise Mission Assurance Support Services (eMASS) framework


• Validate and verify Risk Management Framework (RMF) controls, ensuring that information systems meet security requirements and standards


• Generate and compile all necessary authorization artifacts to support A&A processes, including documentation of security controls, risk assessments, and plans of action and milestones (POA&M)


• Execute Assured Compliance Assessment Solution (ACAS) scans to find and mitigate vulnerabilities in information systems


• Perform Security Technical Implementation Guide (STIG) checks to assess and enhance the security posture of systems


• Collaborate with cross-functional teams to address and resolve security-related issues shown during A&A processes


• Ensure compliance with Authorization to Operate (ATO) and Annual Security Review (ASR) requirements, conducting thorough assessments and validations


• Stay current with industry best practices, DoD directives, and security frameworks to continuously enhance A&A processes


• Provide guidance and expertise on security measures and controls to support the overall security posture of information systems


• Contribute to the development and improvement of security policies, procedures, and documentation


• Collaborate with stakeholders to communicate security-related findings and recommendations effectively


• Maintain a thorough understanding of emerging threats and vulnerabilities, adjusting A&A processes accordingly


• Participate in continuous improvement initiatives to enhance the efficiency and effectiveness of the A&A validation process

Education / Certifications

• Bachelor's degree in computer science or a related field


• Work experience may be accepted in lieu of a degree


• Certified Navy Qualified Validator (NQV)


• CISSP

Other IAT Level II2 certification/DoD 8570 certifications:

• CAP
  CASP+ CE
  CISM


• GSLC
  CCISO
  HCISPP

Benefits

• Medical, dental, vision, disability, and life insurance


• Flexible Spending Accounts


• 401(k)


• PTO


• Tuition reimbursement


• Paid federal holidays

Security Clearance

A high-level Department of Defense active security clearance may be required. Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to government information.

Physical Requirements

Work may involve sitting or standing for extended periods of time and typing and reading from a computer screen. The candidate must have enough mobility, including bending, reaching, and kneeling, to complete daily duties in a prompt and efficient manner and that may include lifting to thirty pounds, as necessary.

Company Summary

Headquartered in Hawaii, Galapagos Federal Systems, LLC is an SBA Certified Native Hawaiian Organization 8(a) Small Business specializing in global information technology and offering professional solutions in IT Design & Installation, Cybersecurity Engineering & Support, Application Integration & Development, Software & Hardware Engineering, Network & Systems Management, Information Systems Security, and Business Management Services.

Leveraging over 30 years of providing IT services to the federal & commercial market with projects found around the world, our team has innovative expertise in the development of a wide range of technological solutions. Galapagos Federal Systems, LLC is an equal opportunity employer.

Our service commitment is simple - "Quality IT Solutions... On Time & On Budget."

Company Employment Statement

Galapagos Federal Systems, LLC reserves the right to change or modify job duties and assignments at any time. The above job description is not all encompassing as positions, functions, and qualifications may vary depending on business needs. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Galapagos Federal Systems, LLC is an equal opportunity employer and does not discriminate against applicants based on race, color, creed, religion, medical condition, legally protected genetic information, national origin, sex (including pregnancy, childbirth, or related medical condition), sexual orientation, gender identity and expression, age, disability, or Vietnam era, or other eligible veteran status or legally protected characteristics.