Information Security Analyst (Navy Qualified Validator), Top Secret Clearance

Job Title: Information Security Analyst (Navy Qualified Validator) - Top Secret Clearance

Job Type : Full-Time, On-site, (Pending Contract Award)

Location: NNSY, Portsmouth, VA

Clearance Required: Position requires an active DoD Top Secret Clearance

Experience Level: (7–10 years)

Certifications Required:

Navy Qualified Validator (NQV) Registration (must be active and current).

DoD 8570.01M Baseline Certification (IAT Level II or IAM Level II minimum), such as:

• • CompTIA Security+ CE
  • GIAC Security Essentials (GSEC)
  • CompTIA CySA+
  • ISC² Systems Security Certified Practitioner (SSCP)

DoD 8570.01M Advanced Certification (preferred for IAM Level III), such as:

• • ISC² Certified Information Systems Security Professional (CISSP)
  • ISC² Certified Authorization Professional (CAP)
  • ISACA Certified Information Security Manager (CISM)

Mandatory: Considering local candidates with US Citizenship only. Employer will not sponsor applicants for work visas for this position.

Overview: MILVETS is currently seeking a full-time, experienced Information Security Analyst (Navy Qualified Validator) - with a Top-Secret Clearance to provide advanced Cybersecurity and Risk Management Framework (RMF) support for Navy systems and networks. The ideal candidate will bring deep expertise in Cybersecurity Assessment & Authorization (CS/A&A) processes, vulnerability assessments, and Navy-specific compliance standards. This role requires a strong mix of technical, analytical, and documentation skills to ensure Navy systems achieve and maintain Authorization to Operate (ATO) in compliance with DoD and DON policies.

About the company : Since its founding in 1986, MILVETS Systems Technology, Inc. has been a reliable provider of quality services in the information and technology fields. As a Service-Disabled Veteran-Owned Small Business, certified by the Small Business Administration as a Small Disadvantaged Business, the company was founded to offer efficient, cost-effective information technology services to commercial and government clients.

Key Responsibilities:

• Perform Cybersecurity Assessment & Authorization (CS/A&A) analysis, ensuring compliance with DoDI 8510.01 (RMF) and Navy requirements.
• Conduct risk assessments, risk mitigation analysis, and vulnerability analysis across systems, applications, and networks.
• Provide NQV validation support for Navy systems, ensuring compliance with DoN A&A and RMF standards.
• Execute Security Test and Evaluation (ST&E) activities, including analysis, reporting, and risk recommendations.
• Manage and process Security Technical Implementation Guides (STIGs) using automated tools (e.g., SCAP, STIGMAN, eMASSter).
• Maintain and update system records in Enterprise Mission Assurance Support Services (eMASS) and other RMF repositories.
• Develop and execute Standard Operating Procedures (SOPs), CONOPs, Business Rules, and Contingency Plans for Navy systems.
• Provide expert firewall policy and ports/protocols configuration support .
• Develop and maintain hardware/software inventories, network boundary diagrams, and technical documentation .
• Upload vulnerability scan data into VRAM and maintain baseline system configuration compliance.
• Provide executive-level reporting, including Plans of Action and Milestones (POA&M) and risk mitigation recommendations.
• Advise leadership on compliance with Federal, DoD, and DON cybersecurity laws, directives, and policies .

Technical Expertise:

• Navy Qualified Validator (NQV) credential with registration.
• Cybersecurity / RMF requirements (DoDI 8510.01).
• System/network vulnerability analysis and mitigation strategies.
• Security Test & Evaluation (ST&E) processes and reporting.
• STIG processing and automated compliance tools (SCAP, Evaluate STIG, STIGMAN, EMASSter).
• RMF documentation and repositories, especially eMASS .
• Contingency planning, training, and execution.
• Firewall policy configuration and ports/protocols management.
• VRAM vulnerability baseline uploads and configuration tracking.
• Expert-level knowledge of DoD/DON cybersecurity directives (FISMA, DoDI 8500.01, SECNAV 5239, NIST SP 800 series, etc.).
• Knowledge of OPNAVINST N9210.3 for safeguarding Naval Nuclear Propulsion Information.

Required Qualifications:

• Bachelor’s degree in information technology, Cybersecurity, or related discipline; OR Level II DoD 8570 Certification (e.g., CompTIA Security+ CE, CISSP).
• Minimum of 7 years of experience supporting CS/A&A and RMF processes, including IA controls analysis and risk management.
• Active Navy Qualified Validator (NQV) registration.
• Fully qualified per DoD 8570.01M requirements (IAT Level II or IAM Level II).
• Demonstrated experience with eMASS, STIG processing tools, and vulnerability assessment tools .
• Strong communication skills with ability to produce executive-level reports, POA&Ms, and project documentation .
• Active Top Secret clearance with SCI eligibility .

Preferred Attributes:

• Master’s degree in Cybersecurity, Information Systems, or related field.
• Direct experience certifying and accrediting DON information systems, networks, and Platform IT .
• Proven ability to advise Navy leadership on cybersecurity strategies and risk management.
• Strong technical writing and presentation skills for producing high-quality deliverables.
• Institutional knowledge of Navy cybersecurity mission-critical procedures, systems, and processes.

MILVETS offers an excellent benefits package including Health Insurance, Dental Insurance, Life Insurance, Disability Insurance, Vision, 401(k), Paid Time Off.

Applicants for U.S. based positions with MILVETS Systems Technology, Inc. must be legally authorized to work in the United States. Verification of employment eligibility will be required at the time of hire. Visa sponsorship is not available for this position.

E-Verify is a registered trademark of the U.S. Department of Homeland Security. This business uses E-Verify in its hiring practices to achieve a lawful workforce.

Equal Employment Opportunity

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.

MILVETS Systems Technology, Inc. is an Equal Employment Opportunity/Affirmative Action Employer and maintains a Drug-Free Workplace.

MILVETS Systems Technology, Inc. (“MILVETS”) uses JazzHR Talent Fit AI to assist in candidate evaluation. This tool leverages artificial intelligence to generate insights but does not make autonomous hiring decisions . All employment decisions are made solely by MILVETS’ recruitment and management teams.

Candidate data processed through JazzHR Talent Fit AI is handled in compliance with applicable privacy and data protection regulations, including GDPR , and MILVETS’ internal policies. MILVETS is an Equal Opportunity Employer (EOE) and complies with all relevant EEOC regulations to ensure fair and equitable hiring practices.

By applying, candidates acknowledge and consent to the use of this tool for recruitment purposes.