Data Scientist/RMF Analyst

C & G Consulting; Washington (District of Columbia); On-site; USD 120,000 - 180,000; Full time

Job summary

The Navy CVN cybersecurity program seeks a senior cybersecurity specialist to drive RMF lifecycle activities, eMASS artifacts, and risk management for CVN platforms. You will translate complex engineering data into actionable cyber findings, support ATO readiness, and ensure compliance with NIST RMF, CNSSI 1253, FISMA and DoN/DoW directives.

Working with engineers, cybersecurity, and program stakeholders, you will shape policy, manage lifecycles, and contribute to rapid fielding of CVN

Qualifications

• Bachelor’s degree in a technical field as listed.
• 7–10+ years in RMF lifecycle activities and A&A support.
• Experience managing eMASS packages and workflows.
• Strong understanding of NIST RMF, CNSSI 1253, FISMA, and DoN/DoW directives.
• Experience reviewing vulnerability assessments and hardening artifacts.
• Ability to translate diagrams and documents into cybersecurity findings.
• Active DoD security clearance and MS Office proficiency.

Responsibilities

• Support RMF, eMASS, and risk management for CVN platforms.
• Advise on ensuring CVN systems meet DoN cybersecurity requirements.
• Translate complex engineering data into actionable cybersecurity recommendations.
• Shape cybersecurity policy and risk processes for cyber survivability.
• Contribute to rapid capability fielding through system engineering and data analysis.
• Develop and maintain cybersecurity policies, SOPs, and mappings to directives.
• Perform vulnerability assessments, test plans, audits, and inspections.

Skills

RMF lifecycle

eMASS proficiency

NIST RMF

CNSSI 1253

FISMA compliance

DoN/DoW directives

vulnerability assessments

STIGs/SRGs reviews

A&A support

DOD security clearance

Education

Bachelor’s degree in computer science, information assurance, cybersecurity, engineering

Tools

eMASS

Security assessment tools

Job description

The candidate shall help strengthen the cybersecurity posture and technical resilience of the Navy’s most advanced aircraft carrier platforms by performing data‑driven analysis, executing RMF activities, and ensuring compliance with DoD cybersecurity requirements. You will work closely with engineering, cybersecurity, and program stakeholders to modernize processes, enhance cyber survivability, and deliver actionable insight for critical CVN systems.

Role:

• Support the cybersecurity readiness and modernization of DPAE Aircraft Carrier (CVN) platforms through comprehensive RMF, eMASS, and risk management activities.
• Serve as a key technical advisor ensuring CVN systems, networks, and HM&E control systems meet Department of Navy and Department of War cybersecurity requirements.
• Review, analyze, and translate complex engineering, security, and data artifacts into actionable technical recommendations for senior Navy stakeholders.
• Shape cybersecurity policy, risk processes, and data driven decision frameworks that enhance cyber survivability across critical maritime systems.
• Contribute directly to rapid capability fielding for CVN platforms through coordinated systems engineering, compliance execution, and data analysis.
• Design, maintain, and modernize cybersecurity infrastructure, RMF processes, and security policies supporting rapid fielding of DPAE CVN capabilities.
• Develop, revise, and maintain cybersecurity policies, SOPs, and business rules aligned with NIST RMF, CNSSI 1253, FISMA, and DoN/DoW directives.
• Perform ongoing RMF and eMASS lifecycle actions including artifact development, control selection, assessment preparation, package management, and A&A support.
• Execute technical risk management activities, integrating cybersecurity considerations into engineering plans, lifecycle documentation, and platform processes.
• Conduct and analyze vulnerability assessments, cyber test plans, cybersecurity audits, and inspection results for CVN control systems and networks.
• Review Technical Data Packages (TDPs), system drawings, modernization packages, and technical documentation to identify cyber risks and propose mitigations.
• Perform configuration and hardening reviews of shipboard networks, infrastructure, and applications against STIGs, SRGs, and other authoritative security baselines.
• Support ATO/ATC readiness through continuous compliance actions, tracking, remediation activities, and monitoring of platform authorization requirements.
• Execute technical data calls and organize program data for cyber initiatives, developing analytical briefings that convey program status, risks, and recommended actions.
• Coordinate planning inputs for program funding, cyber hardening initiatives, and integration activities across CVN program stakeholders.
• Assess the design and enforcement of security boundaries, countermeasures, and protective technologies (firewalls, IDS/IPS, endpoint protection, encryption).
• Ensure confidentiality, integrity, and availability of CVN HM&E control systems, critical shipboard networks, and associated enclaves through ongoing security engineering.

Qualifications:

• Required
  • Bachelor’s degree in computer science, information assurance, cybersecurity, engineering, or related technical field.
  • 7-10+ years of related or applicable professional experience executing RMF lifecycle activities including control selection, implementation, assessment preparation, and A&A support.
  • Experience managing eMASS packages, artifacts, and workflows.
  • Strong understanding of NIST RMF, CNSSI 1253, FISMA, DoN and DoW aligned cybersecurity directives.
  • Experience reviewing vulnerability assessments, cyber test plans, audits, and security hardening artifacts for complex systems or networks.
  • Ability to translate engineering diagrams, TDPs, and technical documentation into cybersecurity findings and recommendations.
  • Experience conducting configuration and hardening reviews using STIGs/SRGs for networks, applications, or industrial control systems.
  • Ability to work independently in a senior level environment with minimal oversight and manage multiple concurrent technical tasks.
  • Active DOD Security Clearance.
  • High proficiency in MS Suite (Word, Excel, PowerPoint, MS Teams, OneNote, etc.)
  • Ability to interface efficiently with team members and technical leads.
• Desired
  • Experience managing eMASS packages, artifacts, and workflows.
  • Strong understanding of NIST RMF, CNSSI 1253, FISMA, DoN and DoW aligned cybersecurity directives.
  • Experience reviewing vulnerability assessments, cyber test plans, audits, and security hardening artifacts for complex systems or networks.
  • Ability to translate engineering diagrams, TDPs, and technical documentation into cybersecurity findings and recommendations.
  • Experience conducting configuration and hardening reviews using STIGs/SRGs for networks, applications, or industrial control systems.
  • Ability to work independently in a senior level environment with minimal oversight and manage multiple concurrent technical tasks.