ConMon Validator

This position is contingent upon award.

Requires an active TS/SCI with CI Poly clearance prior to consideration.

Program Description:

The program provides Systems Engineering and Technical Assistance (SETA) core and non-core support in the areas of Cyber Security and Management to improve the Information Assurance (IA) posture of a National customer. The contracts Core Capabilities are: IA Management, Federal Information Security Management Act (FISMA) coordination and reporting, Risk Management Framework (RMF) application, IA compliance measurements and metrics, Assessment and Authorization (A&A), Vulnerability Management, and Cyber Defense support.

The Information Security Continuous Monitoring Validator provides support to the customer in the area of Cyber Security. Daily tasks include, but are not limited to:

• Supports the Information Security Continuous Monitoring (ISCM) Program Lead and Validator Lead in standing up the customer’s Continuous Monitoring (ConMon) program.
• Assists ConMon Validator Lead with developing ConMon Validation process improvement activities
• Validates, for efficacy, ConMon control Bodies-of-Evidence (BOEs) entered in the ConMon tool
• Guides, mentors and instructs program Information System Security Officers (ISSOs) on methods to improve ConMon BOE entry language
• Guides, mentors and instructs program Information System Security Officers (ISSOs) on methods to improve fidelity of ConMon BOEs
• Assist Security Control Accessors (SCAs), FISMA and Inspector General (IG) Teams on examining ConMon BOEs for official reporting
• Proactively identify and provide metrics and reporting data appropriate for AO/DAOs to make sound risk decisions for continued authorization of systems
• Initiate and participate in studies to improve ConMon reporting metrics
• Recommend improvements on Enterprise Security Services (ESS) tool implementations