RMF Validator

K ’s Product and Technology Solutions Division specializes in rapid prototyping and advanced technology solutions for directed energy, electronic warfare, and security applications. With expertise in electronic warfare systems, critical infrastructure protection, and product R&D, K  delivers cutting‑edge innovations to meet mission‑critical needs. Backed by a global presence and a strong ethical framework, K  collaborates closely with customers to develop secure, effective, and forward‑thinking solutions.

RMF Validator

K ’s Product and Technology Solutions Division specializes in rapid prototyping and advanced technology solutions for directed energy, electronic warfare, and security applications. With expertise in electronic warfare systems, critical infrastructure protection, and product R&D, K  delivers cutting‑edge innovations to meet mission‑critical needs. Backed by a global presence and a strong ethical framework, K  collaborates closely with customers to develop secure, effective, and forward‑thinking solutions.

K  is currently seeking multiple Validators who will provide support to the Naval Research Laboratory located in Washington, DC in accordance with the Navy RPG and NAVWAR Risk Assessment for the following activities: documentation, and artifacts in support of obtaining ATO from the appropriate AO.

• Ability to conduct independent security control assessments according to NIST standards.
• Documentation Review - Review all RMF documentation, including but not limited to the System Security Plan (SSP), Security Assessment Report (SAR), and Plan of Action and Milestones (POA&M) to ensure that documentation aligns with NRL, Navy, and DoD cybersecurity policies, procedures, and standards. Validate the accuracy, completeness, and consistency of all system documentation.
• Independent Validation:
  Conduct independent validation of RMF controls for information systems and networks per the Navy RMF Process Guide. Verify that all security controls have been correctly implemented and are functioning as intended. Ensure the system's security posture is adequately documented, and all relevant artifacts are available for review by the Navy Authorizing Official (NAO)/Functional Authorizing Official (FAO) as appropriate.
• Assessment and Analysis:
  Conduct thorough assessments of security controls based on criteria set forth in NIST SP 800-53, CNSSI 1253, and other applicable Navy and DoD cybersecurity frameworks. Perform technical validation of implemented controls, including but not limited to vulnerability scanning, configuration assessments, and security testing. Analyze findings to determine potential impacts and likelihoods, contributing to a risk‑based decision‑making process.
• Risk Identification and Reporting:
  Identify, categorize, and document cybersecurity risks, vulnerabilities, and deficiencies discovered during the validation process. Provide comprehensive risk assessments that include severity ratings, likelihood determinations, and potential impact assessments. Recommend actionable and prioritized remediation strategies or compensating controls to address identified risks.
• Annual Security Reviews (ASRs):
  Support ASR activities per the Navy SCA Risk Assessment Guide. Validate and assess a subset of the security controls per the system’s approved System Level Continuous Monitoring (SLCM) Strategy. Each annual review will include verification of compliance of inherited controls within those families.
• Functional Security Control Assessor (FSCA) Liaison Support:
  Serve as FSCA-Liaisons (FSCA-Ls) as needed to review validations and support the FSCA in their duties to include but not limited to reviewing Validator…