ConMon Validator

Description

Active TS/SCI with Polygraph Required

Help Shape the Future of Cyber Risk Management

Are you passionate about cybersecurity, risk analysis, and driving enterprise-wide security improvements? Do you enjoy working with data, identifying trends, and influencing high-level risk decisions that protect mission-critical systems?

We're seeking an Information Security Continuous Monitoring (ISCM) Validator to support a high-profile national security customer in strengthening and advancing their cybersecurity posture. In this role, you'll be at the forefront of Continuous Monitoring (ConMon) efforts, helping ensure the effectiveness of security controls, improving risk visibility, and providing decision-makers with the information they need to confidently authorize and protect critical systems.

This is a unique opportunity to work alongside cybersecurity leaders, assessors, ISSOs, and executive stakeholders while helping build and mature an enterprise Continuous Monitoring program from the ground up.

The Mission

You'll join a team delivering critical Systems Engineering and Technical Assistance (SETA) support across a wide range of cybersecurity disciplines, including:

• Risk Management Framework (RMF)
• Cyber Defense Operations
• Assessment & Authorization (A&A)
• Vulnerability Management
• FISMA Compliance and Reporting
• Information Assurance (IA) Governance
• Security Metrics and Reporting

Your work will directly contribute to strengthening security visibility, reducing organizational risk, and supporting informed risk-based decision making across the enterprise.

What You'll Do

As a ConMon Validator, you'll serve as a trusted cybersecurity advisor helping programs demonstrate compliance, improve reporting accuracy, and enhance the effectiveness of continuous monitoring activities.

Key responsibilities include:

• Support the development, implementation, and maturation of the customer's enterprise Continuous Monitoring (ConMon) program.
• Validate security control evidence and documentation to ensure effectiveness, completeness, and compliance with organizational requirements.
• Partner with ISCM leadership to identify opportunities for process improvement and operational efficiencies.
• Review and assess ConMon Bodies of Evidence (BOEs) submitted through enterprise cybersecurity tools.
• Coach and mentor Information System Security Officers (ISSOs) on creating stronger, more meaningful, and defensible security evidence.
• Help improve the quality, consistency, and fidelity of security documentation across multiple programs.
• Collaborate with Security Control Assessors (SCAs), FISMA teams, and Inspector General (IG) stakeholders in support of audits, assessments, and compliance reviews.
• Develop meaningful cybersecurity metrics and reporting that enable Authorizing Officials (AOs) and senior leaders to make informed risk decisions.
• Analyze trends, identify gaps, and recommend improvements to enterprise reporting and monitoring capabilities.
• Evaluate and recommend enhancements to Enterprise Security Services (ESS) tools and processes.
• Contribute to enterprise-wide initiatives that strengthen cybersecurity governance, compliance, and operational resilience.

What Makes This Role Exciting

• Play a key role in building and improving a large-scale Continuous Monitoring program.
• Influence mission-critical cybersecurity decisions at the enterprise level.
• Work directly with senior government stakeholders and cybersecurity leadership.
• Gain exposure to cutting-edge security tools, cloud technologies, and evolving federal cyber requirements.
• Help shape how cyber risk is measured, reported, and managed across critical systems.
• Serve as a subject matter expert and mentor to cybersecurity professionals across the organization.

Requirements

To be considered, candidates must possess:

• Active Top Secret clearance with SCI eligibility and a favorable Polygraph
• Current DoD 8570 IAT or IAM certification
• Experience implementing the Risk Management Framework (RMF) and NIST 800-53 security controls
• Experience developing, reviewing, and maintaining cybersecurity authorization and accreditation documentation
• Experience serving in one or more of the following roles:
  • Information Systems Security Officer (ISSO)
  • Information Systems Security Manager (ISSM)
  • Security Control Assessor (SCA)
  • Delegated Authorizing Official Representative (DAOR)
• Strong analytical and problem-solving skills
• Exceptional attention to detail and organizational ability
• Excellent written and verbal communication skills
• Ability to thrive in a collaborative, team-oriented environment
• Proficiency with Microsoft Office Suite, including Outlook, Excel, PowerPoint, and SharePoint
• Ability to work independently and manage competing priorities with minimal oversight

Desired Qualifications

Highly competitive candidates will also possess:

• Direct experience supporting an Information Security Continuous Monitoring (ISCM) program
• Bachelor's degree in a STEM discipline or advanced cybersecurity certification such as CISSP, CASP+, or equivalent
• Experience supporting Intelligence Community (IC) or Department of Defense (DoD) cybersecurity initiatives
• Experience briefing senior government leaders and executive stakeholders
• Familiarity with cybersecurity governance, acquisition programs, and project management practices
• Hands-on experience with tools such as:
  • RSA Archer
  • ServiceNow
  • Xacta
• Cloud security experience and related certifications
• Knowledge of security metrics development, compliance reporting, and enterprise risk management concepts

Why Join Us?

Your work will directly influence the security and resilience of systems supporting critical national missions. You'll collaborate with talented cybersecurity professionals, help drive meaningful security improvements, and contribute to decisions that protect some of the nation's most important assets.

If you're looking for a role that combines cybersecurity expertise, strategic impact, stakeholder engagement, and mission-driven work, we'd love to hear from you.