Cybersecurity Assessment and Authorization; A&A Specialist

Location: Hanscom AFB, MA, Massachusetts, United States

Requisition Number:26161

Required Travel: 0 - 10%

Employment Type:

Full Time/Salaried/Exempt

Anticipated Salary Range:$86,246.00-$

Security Clearance:Secret

Level of

Experience:

Mid

This opportunity resides with Warfare Systems (WS), a business group within HII’s Mission Technologies division. Warfare Systems comprises cyber and mission IT; electronic warfare; and C5

ISR systems.

HII works within our nation’s intelligence and cyber operations communities to defend our interests in cyberspace and anticipate emerging threats. Our capabilities in cybersecurity, network architecture, reverse engineering, software and hardware development uniquely enable us to support sensitive missions for the U.S. military and federal agency partners.

Meet HII’s Mission Technologies Division
Our team of more than 7,000 professionals worldwide delivers all-domain expertise and advanced technologies in service of mission partners across the globe. Mission Technologies is leading the next evolution of national defense – the data evolution - by accelerating a breadth of national security solutions for government and commercial customers. Our capabilities range from C5

ISR, AI and Big Data, cyber operations and synthetic training environments to fleet sustainment, environmental remediation and the largest family of unmanned underwater vehicles in every class. Find the role that’s right for you. Apply today. We look forward to meeting you.

HII is seeking a talented and motivated Cybersecurity Assessment and Authorization (A&A) Specialist to join our dynamic team supporting the Air Force Cloud and Dev Sec Ops  environment. As a vital member of our Security Control Assessor (SCA) team, you will play a critical role in ensuring the security and compliance of cutting‑edge IT systems that directly empower the Air Force warfighter.

This is an exciting opportunity to be at the forefront of cybersecurity innovation and contribute to the defense of our nation.

• Core Responsibilities
• Cloud Security: This role will serve as the senior cloud security practitioner in the group. A wide variety of experiences in Dev Sec Ops , cloud engineering, or cloud compliance is necessary. Ability to apply both DoD best practices such as the Cloud Security Requirements Guide and Secure Cloud Computing Architecture is critical. Ability to provide analysis of cloud architecture based on these policies is critical.
• Assessment: Conduct independent cybersecurity assessments of assigned programs, adhering to the Risk Management Framework (RMF) and Air Force policies. Perform technical testing and validation of cybersecurity posture, based on government and industry best practices, and the implementation of cybersecurity controls. Identify vulnerabilities and recommend remediation strategies to strengthen overall security posture.
• Authorization: Document assessment findings in a comprehensive Security Assessment Report (SAR). Analyze vulnerability and threat information to identify and enumerate risks. Develop and deliver concise risk reports and briefings to the Authorizing Official and program leadership, ensuring stakeholders understand potential impacts and recommended mitigations. Collaborate with stakeholders to develop and implement effective risk mitigation plans.

Cloud Engineer 2 – Salary min 86,246.00 ~Target salary

Cloud Engineer 3 – Salary min  ~Target salary 157, 414.00

Cloud Engineer 4 – Salary min  ~ Target salary

• Cyber Technical Specialist
• Experience with one or more cloud providers such as AWS, Microsoft Azure, GCP, or OCI is essential; familiarity with government cloud environments (e.g., Cloud One or Cloud Works) is a plus
• Provide guidance and support to clients on cybersecurity best practices for their cloud environments. Knowledge of CIS Cloud Security Benchmarks is important for ensuring proper cloud configuration hardening. Ability to use console, parse json, and work towards automating compliance checks is ideal.
• Utilize industry‑leading security tools to identify and mitigate vulnerabilities. Proficiency in cloud native security tools such as AWS Security Hub, Guard Duty, Microsoft Defender or…