Lead Risk Management Framework (RMF) Specialist (Cyber Network Analysis Tech 4)

Requisition Number: 28122 

Required Travel: 0 - 10%

Employment Type: Full Time/Salaried/Exempt

Anticipated Salary Range: $115,642.00 - $140,000.00 

Security Clearance: TS/SCI  

Level of Experience: Senior 

 

This opportunity resides with Global Security (GS). Mission Technologies’ Global Security (GS) group comprises live, virtual, constructive (LVC) solutions; fleet sustainment; nuclear and environmental; and Australia business.

As a trusted partner to our military customers, HII designs, develops and operates the largest LVC enterprise that prepares warfighters for cross-domain battle. With advanced technologies to enable mission readiness, HII understands that preparation requires full coordination—not readiness in piece-parts.

For more than 40 years, the U.S. Navy has entrusted HII to maintain and modernize the vast majority of its fleet. With a holistic approach to life-cycle maritime defense systems—from small watercraft to submarines, surface combatants and aircraft carriers—HII ensures a high state of readiness.

HII supports the Department of Energy’s national security mission through the management and operation of its sites, as well as the safe cleanup of legacy waste across the country. HII meets clients’ toughest nuclear and environmental challenges.

 

Leadership Mindset at HII – Mission Technologies

Leadership at HII is a mindset, not a title. Through our Leadership Capability Framework, we define how every team member contributes to our mission and culture:

• Know & Grow Your People – Commit to learning and supporting team success.
• Build Relationships – Communicate openly, collaborate well, and build trust.
• Take Ownership – Deliver on commitments and take pride in your work.
• Customer First – Focus on the mission and those we serve.
• Shape the Future – Bring ideas, curiosity, and continuous improvement.
• Act with Urgency – Take initiative and follow through with purpose.

These capabilities guide how all employees contribute to our shared success across Mission Technologies.

Job Description

Mission Technologies a division of Huntington Ingalls Industries, is looking for a qualified individual to fill the role of the Lead Risk Management Framework (RMF) Specialist. You will be responsible for providing cybersecurity technical support to the Navy Enterprise Tactical Training Network (NETTN).

Position requires flexibility to work non-standard work hours and work weeks of more than 40 hours to meet business, customer, and contractual requirements. Additionally, position requires flexibility as duties and responsibilities may be adjusted to meet business, customer, and contractual requirements.

Possible hybrid work schedule.

Essential Job Responsibilities

• Lead the team in conducting security testing and evaluation of servers, workstations, databases, and network infrastructure devices (e.g. firewalls, switches, routers, load balancers) to identify security vulnerabilities and weaknesses, and produce detailed findings reports that support the security authorization process.
• Develop customized scanning and testing configurations within cybersecurity tools to meet specific security and configuration requirements.
• Map identified findings whether discovered through manual assessment, automated scanning, or associated with CVEs to the appropriate NIST SP 800-53 security controls, DoD policies, and relevant technical standards.
• Analyze and interpret cybersecurity directives, policies, and instructions, including CTOs, FRAG/TASK/OPORDs, IAVMs, PKI guidance, and STIG requirements, to assess applicability and required actions.
• Create or Update eMASS artifacts to support Assessments and Authorizations and Annual Security Reviews.
• Evaluate the adequacy of current security testing and assessment toolsets; identify capability gaps and recommend new tools or enhancements to improve assessment coverage and effectiveness.
• Serve as a subject matter expert on known and emerging vulnerabilities, providing analysis of exploitation methods, mitigation and remediation strategies, severity impacts, and operational considerations.
• Review Assessment & Authorization (A&A) documentation to ensure compliance with applicable DoD and RMF cybersecurity policies and standards.
• Perform risk analyses and recommend mitigating controls.
• Assist in drafting, updating, and maintaining cybersecurity policies, procedures, and technical guidance for systems and emerging technologies.
• Provide critical written and oral analysis of security arc