- ESN delivers trusted solutions that support our nation's defense
- We are committed to proven, repeatable corporate quality management processes and are
- This is an on-site role in Norfolk, VA. : Conduct security assessments
- Conduct comprehensive assessments of the management, operational, and technical security controls employed
- Ensure compliance of security configurations for IT systems and aid in providing
- Your experience and technical abilities determine your placement
- This is an on-site role in Norfolk, VA. : Conduct security assessments
AI-generated summary of what this role requires — see the full description below for the employer's original text.
No job description available
Founded in 1995, ESN is a Small Disadvantaged Business (SDB), Service-Disabled Veteran-Owned Small Business (SDVOSB) and Veteran Owned Small Business (VOSB). ESN delivers trusted solutions that support our nation's defense. For more than two decades, we have been providing our military and government customers with mission-critical services including engineering and technical support, strategic and program management, testing and evaluation, operations support, and information technology. We are committed to proven, repeatable corporate quality management processes and are certified CMMI Maturity Level III - Development/Services & ISO 9001:2015.<br> <br>We are seeking a Fully Qualified Navy Validator III.<br> <br>Your experience and technical abilities determine your placement. This is an on-site role in Norfolk, VA. <br> <br> Job Description:<br> <ul> <li>Conduct security assessments of system security plans to help ensure that plans provide security controls for information systems that meet stated security requirements.</li> <li>Conduct comprehensive assessments of the management, operational, and technical security controls employed within or inherited by an information system to determine the overall effectiveness of the controls.</li> <li>Ensure compliance of security configurations for IT systems and aid in providing clear and concise processes and procedures for the implementation and enforcement of system security configurations.</li> <li>Support the risk management process by helping to determine and assign risk impact ratings in accordance with Information Assurance standards guidelines and methodologies and by aiding in the development and maintenance of Plans of Action and Milestones (POA&Ms) for IT systems identified in the Risk Management Framework (RMF) process and annual security assessments of IT systems.</li> <li>Provide assessments of the severity of weaknesses or deficiencies discovered in the information system and its environment of operation and recommend corrective actions to address identified vulnerabilities and prepare the security assessment reports containing the results and findings from system security assessments.</li> </ul> · <br>