Senior Cyber Enhanced Assessment (CEA) Assessor - Woburn, MA

Raytheon; Woburn (MA); On-site; USD 87,000 - 165,000; Full time

Job summary

Raytheon Technologies in Massachusetts seeks a Senior Cyber Enhanced Assessment (CEA) Assessor to support multiple facilities, primarily onsite in Woburn. You will conduct enhanced assessments, analyze results, mentor cybersecurity staff, and support ConMon and Self-Inspection activities to ensure robust security coverage.

Responsibilities include developing ConMon documentation, reporting trends, and assisting in mitigation planning.

Qualifications

• University degree or equivalent; 5+ years of related experience, or an advanced degree with 3+ years.
• IAM Level I certification (Security+ or equivalent) required.
• Experience in cybersecurity, systems security, or system hardening.
• Familiarity with RMF, JSIG, DAAG, NISPOM or related standards.
• Experience with vulnerability analysis tools and security engineering.

Responsibilities

• Develop and sustain ConMon documentation and tools.
• Identify challenges and opportunities for the CEA program.
• Conduct enhanced assessments and report trends with root-cause analysis.
• Assist in mitigation planning and security improvements.
• Provide Cybersecurity support for Self-Inspection events; travel 20–30%.

Skills

Cybersecurity

Security+ or equivalent

Network security

Operating systems auditing

RMF/DAAG/JSIG/NISPOM knowledge

PowerShell scripting

Education

Bachelor's degree or equivalent

Advanced degree in related field

Tools

Splunk

Forcepoint

Ivanti

Tenable

ACAS

HBSS

Job description

Country: United States of America

Location: US-MA-WOBURN-WB1 ~ 235 Presidential Way ~ SPENCER BLDG

Position Role Type: Onsite

U.S. Citizen, U.S. Person, or Immigration Status Requirements: Active and transferable U.S. government issued security clearance is required prior to start date. U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance

Security Clearance Type: Secret - Current

Security Clearance Status: Active and existing security clearance required on day 1

At RTX, the world's largest aerospace and defense company, 185,000 great minds are united by purpose and inspired to make a difference solving the world’s most complex problems. With our three market leading businesses, world-class operations and investments in research and development, we offer capabilities and opportunity no one else can. Together, we push the boundaries of known science and find new ways to connect and protect our world. Raytheon brings the strength of more than 100 years of experience and renowned engineering expertise to meet the needs of today’s mission and stay ahead of tomorrow’s threat. We deliver solutions that help our nation and allies defend freedoms and deter aggression, creating a safer, more secure world. Join us and help shape the future of aerospace and defense. Our cybersecurity team is seeking a Senior Cyber Enhanced Assessment (CEA) Assessor that will support multiple facilities but be primarily located 100% Onsite in Woburn, Massachusetts. The Senior CEA Assessor supports the CEA Lead in executing enhanced assessment activities within their area of responsibility (AOR). This role primarily focuses on CEA responsibilities but also provides support to other assessment services associated with Continuous Monitoring (ConMon) and Self-Inspection efforts to ensure comprehensive security coverage. The Assessor conducts compliance validation, analyzes assessment results to identify significant findings and trends, and mentors other cybersecurity professionals to strengthen vulnerability management across the AOR.

As part of our commitment to maintaining a secure hiring process, candidates may be asked to attend select steps of the interview process in-person at one of our office locations, regardless of whether the role is designated as on-site, hybrid or remote.

Onsite: Employees who are working in Onsite roles will work primarily onsite. This includes all production and maintenance employees, as they are essential to the development of our products.

What You Will Do

• Assists with the development and sustainment of ConMon documentation (e.g., process, instruction, training) and tools.
• Identifies challenges and suggests opportunities for the CEA Program.
• Conducts enhanced assessments.
• Prepares reports to identify trends and significant discoveries and assists with root cause analysis.
• Assists in the development of implementation plans to mitigate the risk.
• Provides Cybersecurity support for Self-Inspection events, as needed.
• Intermittent travel to other Raytheon locations (20-30%).

Qualifications You Must Have

• Typically requires a University Degree or equivalent experience and minimum 5 years prior relevant experience, or an Advanced Degree in a related field and minimum 3 years experience.
• IAM Level I certification (Security+ or other)
• Relevant Experience Considered:
  • Cybersecurity, systems security, or system hardening
  • Security Control Accessor (SCA) with the government or military
  • Information Technology
  • Experience with network security and/or systems security, which includes any of the following: architecture, topology, protocols, components, and/or principles
  • Experience with configuring and/or auditing operating systems
  • Compliance-based auditing using the Risk Management Framework (RMF), Defense Counterintelligence and Security Agency (DCSA) Assessment and Authorization Guide (DAAG), Joint SAP Implementation Guide (JSIG), National Industrial Security Program Operating Manual (NISPOM), and/or non-defense regulations such as FAA, Payment Card Industry (PCI), ISO 9001 Quality Management standards, or HIPAA
  • Experience working with and/or supporting computer technologies (such as: databases, operating systems, computer network hardware, protocols, security methodologies, software programs, hardware troubleshooting or electronics)
  • Experience with various information system security tools that address vulnerability analysis and mitigation. These include Splunk, Forcepoint, Ivanti, Tenable, ACAS, HBSS, etc.

Qualifications We Prefer

• Experienced in C# development and code review within a professional environment
• Knowledge and capability of writing scripts in PowerShell, BASH, and Splunk Search Processing Language (SPL)
• Familiarity with implementation of Government directives and policies derived from NIST, CNSSI, DoD, or other Government Regulatory compliance standards within a professional industry.
• Experience providing technical security consultation for complex, cross-domain, heterogeneous classified networked environments in collaboration with internal/external Customers, Information Technology (IT).
• Familiarity with large multi-facility networks including complex components, including Windows and Linux environments.
• Experience interpreting, implementing, and assessing DISA STIGs.
• Experience with continuous monitoring and Plans of Actions and Milestones (POA&Ms).

What We Offer

Our values drive our actions, behaviors, and performance with a vision for a safer, more connected world. At RTX we value: Trust, Respect, Accountability, Collaboration, and Innovation.

Relocation Non-Eligible – Relocation assistance not available

The salary range for this role is 86,800 USD - 165,200 USD. The salary range provided is a good faith estimate representative of all experience levels. RTX considers several factors when extending an offer, including but not limited to, the role, function and associated responsibilities, a candidate’s work experience, location, education/training, and key skills.

• Hired applicants may be eligible for benefits, including but not limited to, medical, dental, vision, life insurance, short-term disability, long-term disability, 401(k) match, flexible spending accounts, flexible work schedules, employee assistance program, Employee Scholar Program, parental leave, paid time off, and holidays. Specific benefits are dependent upon the specific business unit as well as whether or not the position is covered by a collective-bargaining agreement.

• Hired applicants may be eligible for annual short-term and/or long-term incentive compensation programs depending on the level of the position and whether or not it is covered by a collective-bargaining agreement. Payments under these annual programs are not guaranteed and are dependent upon a variety of factors including, but not limited to, individual performance, business unit performance, and/or the company’s performance.

This role is a U.S.-based role. If the successful candidate resides in a U.S. territory, the appropriate pay structure and benefits will apply.

RTX anticipates the application window closing approximately 40 days from the date the notice was posted. However, factors such as candidate flow and business necessity may require RTX to shorten or extend the application window.

RTX is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or veteran status, or any other applicable state or federal protected class. RTX provides affirmative action in employment for qualified Individuals with a Disability and Protected Veterans in compliance with Section 503 of the Rehabilitation Act and the Vietnam Era Veterans’ Readjustment Assistance Act.