Cybersecurity Assessment and Authorization (A&A) Specialist

Mission Technologies, a division of HII; Lincoln (MA); On-site; USD 86,246 - 175,000; Full time

Benefits offered by this job

Medical, dental, and vision plan

401(k) Savings Plan

Tuition reimbursement

Education scholarships

Paid holidays and PTO

Job summary

HII Mission Technologies seeks a Cybersecurity A&A Specialist to support Air Force cloud environments. You will lead RMF-based assessments and contribute to risk-based decision making, reporting findings to leadership.

Responsibilities include documenting SARs, guiding remediation, and coordinating with stakeholders to implement security controls. A Secret clearance is required and travel up to 10% may be necessary.

Qualifications

• Cloud security principles and RMF implementation.
• Experience with Windows/Linux, containers, cloud services, and DevSecOps.
• DoD 8140 / 8570 certification required.
• Knowledge of CIS Cloud Security Benchmarks and cloud hardening.

Responsibilities

• Serve as senior cloud security practitioner in DevSecOps and cloud engineering.
• Conduct independent cybersecurity assessments per RMF and Air Force policies.
• Document SARs, analyze risks, and deliver concise risk mitigation reports.
• Guide clients on cybersecurity best practices for cloud environments.

Skills

Cloud security

RMF knowledge

Vulnerability assessment

Cybersecurity best practices

Education

Bachelor's degree in related field

DoD 8140 / 8570 certification

Tools

AWS

Azure

GCP

OCI

Job description

Job Details

Requisition Number: 28040

Required Travel: 0 - 10%

Employment Type: Full Time/Salaried/Exempt

Anticipated Salary Range: $86,246.00 - $175,000.00

Security Clearance: Secret

Level of Experience: Mid

Job Description

HII is seeking a talented and motivated Cybersecurity Assessment and Authorization (A&A) Specialist to join our dynamic team supporting the Air Force Cloud and DevSecOps environment. As a vital member of our Security Control Assessor (SCA) team, you will play a critical role in ensuring the security and compliance of cutting‑edge IT systems that directly empower the Air Force warfighter. This is an exciting opportunity to be at the forefront of cybersecurity innovation and contribute to the defense of our nation.

Core Responsibilities

• Cloud Security: This role will serve as the senior cloud security practitioner in the group. A wide variety of experiences in DevSecOps, cloud engineering, or cloud compliance is necessary. Ability to apply both DoD best practices such as the Cloud Security Requirements Guide and Secure Cloud Computing Architecture is critical. Ability to provide analysis of cloud architecture based on these policies is critical.
• Assessment: Conduct independent cybersecurity assessments of assigned programs, adhering to the Risk Management Framework (RMF) and Air Force policies. Perform technical testing and validation of cybersecurity posture, based on government and industry best practices, and the implementation of cybersecurity controls. Identify vulnerabilities and recommend remediation strategies to strengthen overall security posture.
• Authorization: Document assessment findings in a comprehensive Security Assessment Report (SAR). Analyze vulnerability and threat information to identify and enumerate risks. Develop and deliver concise risk reports and briefings to the Authorizing Official and program leadership, ensuring stakeholders understand potential impacts and recommended mitigations. Collaborate with stakeholders to develop and implement effective risk mitigation plans.

Salary Information

Cloud Engineer 2 – Salary min 86,246.00 ~Target salary 123,209.00

Cloud Engineer 3 – Salary min 110,090.00 ~Target salary 157,414.00

Cloud Engineer 4 – Salary min 131,531.00 ~Target salary 175,000.00

Essential Job Responsibilities

Cyber Technical Specialist

• Experience with one or more cloud providers such as AWS, Microsoft Azure, GCP, or OCI is essential; familiarity with government cloud environments (e.g., Cloud One or CloudWorks) is a plus
• Provide guidance and support to clients on cybersecurity best practices for their cloud environments. Knowledge of CIS Cloud Security Benchmarks is important for ensuring proper cloud configuration hardening. Ability to use console, parse json, and work towards automating compliance checks is ideal.
• Utilize industry‑leading security tools to identify and mitigate vulnerabilities. Proficiency in cloud native security tools such as AWS Security Hub, Guard Duty, Microsoft Defender or Sentinel

Cyber Collaborator

• Collaborate effectively with system owners, developers, and stakeholders. Build strong working relationships to ensure security is integrated throughout the system development lifecycle.
• Communicate technical information clearly and concisely to diverse audiences. Prepare and deliver executive‑level briefings and reports to senior management, effectively communicating complex technical topics.
• Produce high‑quality technical documentation. Develop clear, understandable, and actionable reports on diverse technical security and policy issues.

Minimum Qualifications

Experience & Education:

• Cloud Engineer 2 - 2 years’ experience with Bachelor’s in related field; or High School Diploma and 6 years relevant experience.
• Cloud Engineer 3 - 5 years’ experience with Bachelor’s in related field; or High School Diploma and 9 years relevant experience.
• Cloud Engineer 4 - 9 years’ experience with Bachelor’s in related field; or High School Diploma and 13 years relevant experience.

Knowledge Base:

• Strong understanding of information security principles: access control, authentication, system hardening, vulnerability management, and data protection.
• Practical IT experience across a range of environments and technologies such as Windows and Linux operating systems, containerized platforms, cloud services, and DevSecOps practice.

Preferred Certifications:

• Must have a DoD 8140 / 8570 compliance certification
• AWS Certified Security Specialist, AWS Certified Solution Architect, Azure Security Engineer, or similar

Security Clearance:

• A Secret clearance is required.

Work Locations:

• Must be able to work on customer site at Hanscom AFB and HII office in Concord, MA. Travel estimated at 10% could be required.

Benefits

HII is more than a job - it’s an opportunity to build a new future. We offer competitive benefits such as best‑in‑class medical, dental and vision plan choices; wellness resources; employee assistance programs; Savings Plan Options (401(k)); financial planning tools, life insurance; employee discounts; paid holidays and paid time off; tuition reimbursement; as well as early childhood and post‑secondary education scholarships. Bonus/other non‑recurrent compensation is occasionally offered for qualified positions, and if applicable to this role will be addressed by the recruiter at the screening phase of application.

Equal Opportunity Employer

All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, physical or mental disability, age, or veteran status or any other basis protected by federal, state, or local law.

Reasonable Accommodations

If you need a reasonable accommodation for any part of the employment process, please send an e‑mail to [e-mail] and let us know the nature of your request and your contact information. Reasonable accommodations are considered on a case‑by‑case basis. Please note that only those inquiries concerning a request for reasonable accommodation will be responded to from this email address. Additionally, you may also call 1-844-849-8463 for assistance. Press #3 for HII Mission Technologies.