Peraton is seeking a Cybersecurity Validator (IV&V) to help secure US Marine Corps hybrid and multi‑cloud environments from Kansas City, Missouri, on a hybrid work arrangement. The role centers on RMF validation, vulnerability verification, and risk assessments, providing informed guidance to government leadership on cybersecurity risk in complex networks.
Responsibilities
- Validate system compliance with the RMF framework and DoD/Navy/USMC/MCCOG/HCS cybersecurity requirements for hybrid, multi‑cloud environments.
- Validate vulnerability analyses and self‑assessment reviews, authorization and accreditation documentation, and offer risk recommendations to government leadership regarding operations on or connected to USMC networks.
- Plan, lead, and execute verification and validation activities across cross‑functional cybersecurity services.
- Assess implemented security controls, including technical artifacts and documentation, to determine compliance and risk posture.
- Interpret information assurance and cybersecurity guidance and apply expertise to assess compliance and risk in Navy/USMC IV&V, and in Authorization and Accreditation (C&A)/Assessment and Authorization (A&A) including RMF.
- Assess compliance and risk for private and public cloud operations, including commercial cloud hosted environments (FedRAMP/DOD inheritance models).
- Prepare documentation from information gathered using RMF guidelines.
- Develop risk scoring and assessment recommendations for government leadership.
- Analyze policies and procedures against Federal laws and regulations, offering recommendations to close gaps for POA&M development.
- Conduct security program audits and vulnerability assessments.
- Complete required analyses and post information through governance systems, currently eMASS.
- Support Security Control Assessor (SCA) operations.
Requirements
- Minimum experience: 8 years with a BS/BA; or 6 years with MS/MA; or 3 years with a PhD. An additional 4 years of experience may substitute for the bachelor’s degree.
- IAT II Certification required (8570) or Security Control Assessor‑Intermediate (8140).
- ACAS and SCC/SCAP experience.
- eMASS experience and certification.
- Experience with USMC or DoD RMF requirements for authorization and accreditation.
- Experience evaluating risk scoring.
- Experience with Evaluate STIG, Open RMF, manual STIG review (STIG Viewer, .cklb) and other STIG compliance tools and practices.
- Knowledge and experience applying RMF and cloud security requirements to cloud applications.
- Knowledge of NIST 800-53A and applying those guidelines to evaluate system security risk and compliance.
- Experience documenting POA&Ms in eMASS and preparing risk assessments.
- Experience developing, planning, and executing security test plans such as SAP and SAR.
- U.S. citizenship is required.
- DoD Secret clearance/Tier 3 BI.
Technologies
- RMF
- eMASS
- STIG Viewer
- STIGs
- ACAS
- Open RMF
- FedRAMP
- Azure
- NIST 800-53A
Benefits
- Medical insurance
- Dental insurance
- Vision insurance
- Life insurance
- Health savings account
- Short‑term disability
- Long‑term disability
- Employee Assistance Program (EAP)
- Parental leave
- 401(k)
- PTO for vacation
- Company paid holidays
Details
Target salary range is $104,000 to $166,000. Compensation is determined by the scope of the role, the candidate’s experience, education, knowledge, and skills, as well as geographic location and contract considerations. Depending on the position, overtime, shift differential, and a discretionary bonus may apply in addition to base pay.
Application statements
The application period is estimated at 30 days from the posting date, though this timeline may be adjusted. By applying, you express interest in the role. Review may include an on‑camera interview and identity verification as part of the process.
EEO
Peraton is an equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.
