Data Scientist/RMF Analyst

The candidate shall help strengthen the cybersecurity posture and technical resilience of the Navy’s most advanced aircraft carrier platforms by performing data‑driven analysis, executing RMF activities, and ensuring compliance with DoD cybersecurity requirements. You will work closely with engineering, cybersecurity, and program stakeholders to modernize processes, enhance cyber survivability, and deliver actionable insight for critical CVN systems.

Role:

• Support the cybersecurity readiness and modernization of DPAE Aircraft Carrier (CVN) platforms through comprehensive RMF, eMASS, and risk management activities.
• Serve as a key technical advisor ensuring CVN systems, networks, and HM&E control systems meet Department of Navy and Department of War cybersecurity requirements.
• Review, analyze, and translate complex engineering, security, and data artifacts into actionable technical recommendations for senior Navy stakeholders.
• Shape cybersecurity policy, risk processes, and data driven decision frameworks that enhance cyber survivability across critical maritime systems.
• Contribute directly to rapid capability fielding for CVN platforms through coordinated systems engineering, compliance execution, and data analysis.
• Design, maintain, and modernize cybersecurity infrastructure, RMF processes, and security policies supporting rapid fielding of DPAE CVN capabilities.
• Develop, revise, and maintain cybersecurity policies, SOPs, and business rules aligned with NIST RMF, CNSSI 1253, FISMA, and DoN/DoW directives.
• Perform ongoing RMF and eMASS lifecycle actions including artifact development, control selection, assessment preparation, package management, and A&A support.
• Execute technical risk management activities, integrating cybersecurity considerations into engineering plans, lifecycle documentation, and platform processes.
• Conduct and analyze vulnerability assessments, cyber test plans, cybersecurity audits, and inspection results for CVN control systems and networks.
• Review Technical Data Packages (TDPs), system drawings, modernization packages, and technical documentation to identify cyber risks and propose mitigations.
• Perform configuration and hardening reviews of shipboard networks, infrastructure, and applications against STIGs, SRGs, and other authoritative security baselines.
• Support ATO/ATC readiness through continuous compliance actions, tracking, remediation activities, and monitoring of platform authorization requirements.
• Execute technical data calls and organize program data for cyber initiatives, developing analytical briefings that convey program status, risks, and recommended actions.
• Coordinate planning inputs for program funding, cyber hardening initiatives, and integration activities across CVN program stakeholders.
• Assess the design and enforcement of security boundaries, countermeasures, and protective technologies (firewalls, IDS/IPS, endpoint protection, encryption).
• Ensure confidentiality, integrity, and availability of CVN HM&E control systems, critical shipboard networks, and associated enclaves through ongoing security engineering.

Qualifications:

• Required
  • Bachelor’s degree in computer science, information assurance, cybersecurity, engineering, or related technical field.
  • 7-10+ years of related or applicable professional experience executing RMF lifecycle activities including control selection, implementation, assessment preparation, and A&A support.
  • Experience managing eMASS packages, artifacts, and workflows.
  • Strong understanding of NIST RMF, CNSSI 1253, FISMA, DoN and DoW aligned cybersecurity directives.
  • Experience reviewing vulnerability assessments, cyber test plans, audits, and security hardening artifacts for complex systems or networks.
  • Ability to translate engineering diagrams, TDPs, and technical documentation into cybersecurity findings and recommendations.
  • Experience conducting configuration and hardening reviews using STIGs/SRGs for networks, applications, or industrial control systems.
  • Ability to work independently in a senior level environment with minimal oversight and manage multiple concurrent technical tasks.
  • Active DOD Security Clearance.
  • High proficiency in MS Suite (Word, Excel, PowerPoint, MS Teams, OneNote, etc.)
  • Ability to interface efficiently with team members and technical leads.
• Desired
  • Experience managing eMASS packages, artifacts, and workflows.
  • Strong understanding of NIST RMF, CNSSI 1253, FISMA, DoN and DoW aligned cybersecurity directives.
  • Experience reviewing vulnerability assessments, cyber test plans, audits, and security hardening artifacts for complex systems or networks.
  • Ability to translate engineering diagrams, TDPs, and technical documentation into cybersecurity findings and recommendations.
  • Experience conducting configuration and hardening reviews using STIGs/SRGs for networks, applications, or industrial control systems.
  • Ability to work independently in a senior level environment with minimal oversight and manage multiple concurrent technical tasks.

#J-18808-Ljbffr Jobleads-US