ConMon Validator

Are you passionate about cybersecurity, risk analysis, and driving enterprise-wide security improvements? Do you enjoy working with data, identifying trends, and influencing high-level risk decisions that protect mission-critical systems?

We're seeking an Information Security Continuous Monitoring (ISCM) Validator to support a high-profile national security customer in strengthening and advancing their cybersecurity posture. In this role, you'll be at the forefront of Continuous Monitoring (Con Mon) efforts, helping ensure the effectiveness of security controls, improving risk visibility, and providing decision-makers with the information they need to confidently authorize and protect critical systems.

This is a unique opportunity to work alongside cybersecurity leaders, assessors, ISSOs, and executive stakeholders while helping build and mature an enterprise Continuous Monitoring program from the ground up.

You'll join a team delivering critical Systems Engineering and Technical Assistance (SETA) support across a wide range of cybersecurity disciplines, including:

• Risk Management Framework (RMF)
• Cyber Defense Operations
• Assessment & Authorization (A&A)
• Vulnerability Management
• FISMA Compliance and Reporting
• Information Assurance (IA) Governance
• Security Metrics and Reporting

Your work will directly contribute to strengthening security visibility, reducing organizational risk, and supporting informed risk-based decision making across the enterprise.

As a Con Mon Validator, you'll serve as a trusted cybersecurity advisor helping programs demonstrate compliance, improve reporting accuracy, and enhance the effectiveness of continuous monitoring activities.

Key responsibilities include:

• Support the development, implementation, and maturation of the customer's enterprise Continuous Monitoring (Con Mon) program.
• Validate security control evidence and documentation to ensure effectiveness, completeness, and compliance with organizational requirements.
• Partner with ISCM leadership to identify opportunities for process improvement and operational efficiencies.
• Review and assess Con Mon Bodies of Evidence (BOEs) submitted through enterprise cybersecurity tools.
• Coach and mentor Information System Security Officers (ISSOs) on creating stronger, more meaningful, and defensible security evidence.
• Help improve the quality, consistency, and fidelity of security documentation across multiple programs.
• Collaborate with Security Control Assessors (SCAs), FISMA teams, and Inspector General (IG) stakeholders in support of audits, assessments, and compliance reviews.
• Develop meaningful cybersecurity metrics and reporting that enable Authorizing Officials (AOs) and senior leaders to make informed risk decisions.
• Analyze trends, identify gaps, and recommend improvements to enterprise reporting and monitoring capabilities.
• Evaluate and recommend enhancements to Enterprise Security Services (ESS) tools and processes.
• Contribute to enterprise-wide initiatives that strengthen cybersecurity governance, compliance, and operational resilience.

• Play a key role in building and improving a large-scale Continuous Monitoring program.
• Influence mission-critical cybersecurity decisions at the enterprise level.
• Work directly with senior government stakeholders and cybersecurity leadership.
• Gain exposure to cutting-edge security tools, cloud technologies, and evolving federal cyber requirements.
• Help shape how cyber risk is measured, reported, and managed across critical systems.
• Serve as a subject matter expert and mentor to cybersecurity professionals across the organization.

To be considered, candidates must possess:

• Active Top Secret clearance with SCI eligibility and a favorable Polygraph
• Current DoD 8570 IAT or IAM certification
• Experience implementing the Risk Management Framework (RMF) and NIST 800-53 security controls
• Experience developing, reviewing, and maintaining cybersecurity authorization and accreditation documentation
• Experience serving in one or more of the following roles:
  • Information Systems Security Officer (ISSO)
  • Information Systems Security Manager (ISSM)
  • Security Control Assessor (SCA)
  • Delegated Authorizing Official Representative (DAOR)
• Strong analytical and problem-solving skills
• Exceptional attention to detail and organizational ability
• Excellent written and verbal communication skills
• Ability to thrive in a…