ConMon Validator

Active TS/SCI with Polygraph Required

Help Shape the Future of Cyber Risk Management

Are you passionate about cybersecurity, risk analysis, and driving enterprise- wide security improvements? Do you enjoy working with data, identifying trends, and influencing high-level risk decisions that protect mission- critical systems?

We're seeking an Information Security Continuous Monitoring (ISCM) Validator to support a high-profile national security customer in strengthening and advancing their cybersecurity posture. In this role, you'll be at the forefront of Continuous Monitoring (ConMon) efforts, helping ensure the effectiveness of security controls, improving risk visibility, and providing decision-makers with the information they need to confidently authorize and protect critical systems.

This is a unique opportunity to work alongside cybersecurity leaders, assessors, ISSOs, and executive stakeholders while helping build and mature an enterprise Continuous Monitoring program from the ground up.

The Mission

You'll join a team delivering critical Systems Engineering and Technical Assistance (SETA) support across a wide range of cybersecurity disciplines, including:

• Risk Management Framework (RMF)
• Cyber Defense Operations
• Assessment & Authorization (A&A)
• Vulnerability Management
• FISMA Compliance and Reporting
• Information Assurance (IA) Governance
• Security Metrics and Reporting

Your work will directly contribute to strengthening security visibility, reducing organizational risk, and supporting informed risk-based decision making across the enterprise.

What You'll Do

As a ConMon Validator, you'll serve as a trusted cybersecurity advisor helping programs demonstrate compliance, improve reporting accuracy, and enhance the effectiveness of continuous monitoring activities.

Key responsibilities include:

• Support the development, implementation, and maturation of the customer's enterprise Continuous Monitoring (ConMon) program.
• Validate security control evidence and documentation to ensure effectiveness, completeness, and compliance with organizational requirements.
• Partner with ISCM leadership to identify opportunities for process improvement and operational efficiencies.
• Review and assess ConMon Bodies of Evidence (BOEs) submitted through enterprise cybersecurity tools.
• Coach and mentor Information System Security Officers (ISSOs) on creating stronger, more meaningful, and defensible security evidence.
• Help improve the quality, consistency, and fidelity of security documentation across multiple programs.
• Collaborate with Security Control Assessors (SCAs), FISMA teams, and Inspector General (IG) stakeholders in support of audits, assessments, and compliance reviews.
• Develop meaningful cybersecurity metrics and reporting that enable Authorizing Officials (AOs) and senior leaders to make informed risk decisions.
• Analyze trends, identify gaps, and recommend improvements to enterprise reporting and monitoring capabilities.
• Evaluate and recommend enhancements to Enterprise Security Services (ESS) tools and processes.
• Contribute to enterprise-wide initiatives that strengthen cybersecurity governance, compliance, and operational resilience.

What Makes This Role Exciting

• Play a key role in building and improving a large-scale Continuous Monitoring program.
• Influence mission-critical cybersecurity decisions at the enterprise level.
• Work directly with senior government stakeholders and cybersecurity leadership.
• Gain exposure to cutting-edge security tools, cloud technologies, and evolving federal cyber requirements.
• Help shape how cyber risk is measured, reported, and managed across critical systems.
• Serve as a subject matter expert and mentor to cybersecurity professionals across the organization.