> Markdown version of [/jobs/ext/1317135-information-security-analyst-navy-qualified-validator](https://www.wearedevelopers.com/jobs/ext/1317135-information-security-analyst-navy-qualified-validator). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Security Analyst (Navy Qualified Validator)

- **Company:** DecisionPoint Corporation
- **Location:** Portsmouth, NH, United States
- **Experience:** Expert
- **Salary:** $95,000.0 - $100,000.0
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Information Systems, Vulnerability Analysis
- **Published:** July 17, 2026
- **Apply:** https://www.dice.com/job-detail/22b0f6a3-ed9d-4e30-85a1-d52ca670e22f

## About the Role

* Active Top Secret clearance required.
 * Bachelor's degree in an IT-related discipline or a Level II Certification (Security+ or better).
 * Minimum of seven (7) years of experience in CS/A&A analysis support, including IA controls analysis, risk assessments, risk mitigation analysis, or plan development.

## Description

* Support Navy and DoD information systems through Cybersecurity (CS), Certification & Accreditation (C&A), and Risk Management Framework (RMF) activities.
 * Perform security assessments and analysis, including IA controls validation, risk assessments, and risk mitigation planning.
 * Serve as a Navy Qualified Validator (NQV), supporting system Accreditation & Authorization (A&A) efforts.
 * Conduct system and network vulnerability analysis and support remediation and mitigation activities.
 * Execute STIG assessments and manage RMF artifacts using automated STIG tools and eMASS.
 * Support Security Test and Evaluation (ST&E) activities and document results.
 * Develop and maintain RMF documentation, including SOPs, CONOPs, security plans, and POA&Ms.
 * Support contingency planning, training, and testing related to system security.
 * Provide expert guidance to system owners and stakeholders on cybersecurity compliance and vulnerability mitigation.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Microservices? Monoliths? An Annoying Discussion!](https://www.wearedevelopers.com/videos/970-microservices-monoliths-an-annoying-discussion)
- [How to Cause (or Prevent) a Massive Data Breach- Secure Coding and IDOR](https://www.wearedevelopers.com/videos/39-how-to-cause-or-prevent-a-massive-data-breach-secure-coding-and-idor)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Securing Your Web Application Pipeline From Intruders](https://www.wearedevelopers.com/videos/53-securing-your-web-application-pipeline-from-intruders)
- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)

## Related Articles

- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)