CI&I Data Exfiltration Investigator - Tewksbury, MA
Listed on 2026-02-28
-
IT/Tech
Cybersecurity
Location: US-MA-TEWKSBURY-TB1 ~ 50 Apple Hill Dr ~ ASSABET BLDG
Date Posted:
Country: United States of America
Location: US-MA-TEWKSBURY-TB1 ~ 50 Apple Hill Dr ~ ASSABET BLDG
Position Role Type: Onsite
U.S. Citizen, U.S. Person, or Immigration Status Requirements: Active and transferable U.S. government issued security clearance is required prior to start date. U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance
Security Clearance Type: DoD Clearance:
Top Secret
Security Clearance Status: Active and existing security clearance required on day 1
At Raytheon, the foundation of everything we do is rooted in our values and a higher calling – to help our nation and allies defend freedoms and deter aggression. We bring the strength of more than 100 years of experience and renowned engineering expertise to meet the needs of today’s mission and stay ahead of tomorrow’s threat. Our team solves tough, meaningful problems that create a safer, more secure world.
WhatYou Will Do
- Operate independently providing expert-level data exfil investigative capabilities that include, but not limited to:
- Independently plan and conduct Data Exfiltration investigations that result in sound outcomes/determinations, capable of withstanding judicial/administrative scrutiny into noncompliance with Customer regulatory requirements, Company policies and procedures, and violations of the law.
- Write detailed, highly professional reports summarizing investigative steps/actions.
- Conduct a wide range of employee interviews, to include challenging subject interviews of those suspected of wrongdoing.
- Ensure all relevant case artifacts (unless prohibited) are securely stored in the Resolver Case Management System.
- Closely collaborate with other CI&I members, GSS colleagues, and cross-functional partners.
- Collaborate with and provide timely feedback to our partners in Enterprise Services (ES) as it relates to the refinement of tools and processes used in identifying potential indicators of concern.
- For matters involving culpability of cleared employees, ensure cognizant FSOs are provided with necessary investigative details for required adverse information reporting obligations.
- You will expand your business acumen and learn about Raytheon’s offensive/defensive solutions to help U.S. government, Allies and Partners defend their national sovereignty and ensure their security.
- How CI&I’s proactive CI initiatives and InT program advances Raytheon’s security culture, program execution excellence, an operational productivity, as well as fosters Customer’s confidence and Raytheon’s competitive advantage.
- Experience with User Activity Monitoring (UAM), SPLUNK (SIEM) and Endpoint DLP, or similar tools that are utilized in Insider Threat (InT) identification and mitigation.
- Experience with identifying, collecting and analyzing data/metrics for leadership.
- Experience with computer operating systems, computer networking and computer vulnerabilities.
- Experience with Microsoft Office and O365.
- Typically requires: A University Degree or equivalent experience and minimum 8 years prior relevant experience, or An Advanced Degree in a related field and minimum 5 years experience
- Certification by a federal credentialing counterintelligence or investigative agency.
- Prior Law Enforcement Experience.
- Hands-on experience with investigations involving CI, SCI, SAP, and/or ITAR/EAR violations.
- Familiarity with DoD Manual 5205.07 Volumes 1 thru 4.
- Familiarity with DoD 5200.01 Volumes 1 thru 3, and incident reporting process in accordance with DoD 5200.01 volume 3.
- 32 CFR Part 117 National Industrial Security Program Operating Manual
- Familiarity with Computer Forensics methodologies and techniques.
- Our values drive our actions, behaviors, and performance with a vision for a safer, more connected world. At RTX we value:
Trust, Respect, Accountability, Collaboration, and Innovation. - Relocation Non-Eligible – Relocation assistance not available
- Please consider the following role type definition as you apply for this role. ‒ Onsite:
Employees who…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).