C & G Consulting supports cybersecurity readiness and modernization efforts for DPAE Aircraft Carrier (CVN) platforms. In this onsite Washington, DC role, you will help drive RMF and eMASS execution, strengthen cyber compliance, and translate complex engineering and security artifacts into practical recommendations for senior Navy stakeholders.
Responsibilities
- Support cybersecurity readiness and modernization of DPAE Aircraft Carrier (CVN) platforms through comprehensive RMF, eMASS, and risk management activities.
- Advise on cyber compliance for CVN systems, networks, and HM&E control systems to meet Department of Navy and Department of War cybersecurity requirements.
- Review, analyze, and translate engineering, security, and data artifacts into actionable technical recommendations for senior Navy stakeholders.
- Shape cybersecurity policy, risk processes, and data driven decision frameworks to improve cyber survivability across critical maritime systems.
- Contribute to rapid capability fielding by coordinating systems engineering, compliance execution, and data analysis for CVN platforms.
- Design, maintain, and modernize cybersecurity infrastructure, RMF processes, and security policies supporting rapid fielding of DPAE CVN capabilities.
- Develop, revise, and maintain cybersecurity policies, SOPs, and business rules aligned with NIST RMF, CNSSI 1253, FISMA, and DoN/DoW directives.
- Perform ongoing RMF and eMASS lifecycle actions, including artifact development, control selection, assessment preparation, package management, and authorization and assessment (A&A) support.
- Execute technical risk management activities by integrating cybersecurity considerations into engineering plans, lifecycle documentation, and platform processes.
- Conduct and analyze vulnerability assessments, cyber test plans, cybersecurity audits, and inspection results for CVN control systems and networks.
- Review Technical Data Packages (TDPs), system drawings, modernization packages, and technical documentation to identify cyber risks and propose mitigations.
- Perform configuration and hardening reviews of shipboard networks, infrastructure, and applications against STIGs, SRGs, and other authoritative security baselines.
- Support ATO/ATC readiness through continuous compliance actions, including tracking, remediation, and monitoring of platform authorization requirements.
- Execute technical data calls, organize program data for cyber initiatives, and develop analytical briefings covering program status, risks, and recommended actions.
- Coordinate planning inputs for program funding, cyber hardening initiatives, and integration activities across CVN program stakeholders.
- Assess security boundaries, countermeasures, and protective technologies including firewalls, IDS/IPS, endpoint protection, and encryption.
- Ensure confidentiality, integrity, and availability of CVN HM&E control systems, critical shipboard networks, and associated enclaves through ongoing security engineering.
Requirements
- Bachelor’s degree in computer science, information assurance, cybersecurity, engineering, or a related technical field.
- 7-10+ years of related or applicable professional experience executing RMF lifecycle activities, including control selection, implementation, assessment preparation, and A&A support.
- Experience managing eMASS packages, artifacts, and workflows.
- Strong understanding of NIST RMF, CNSSI 1253, FISMA, and DoN/DoW aligned cybersecurity directives.
- Experience reviewing vulnerability assessments, cyber test plans, audits, and security hardening artifacts for complex systems or networks.
- Ability to translate engineering diagrams, TDPs, and technical documentation into cybersecurity findings and recommendations.
- Experience conducting configuration and hardening reviews using STIGs/SRGs for networks, applications, or industrial control systems.
- Ability to work independently at a senior level with minimal oversight while managing multiple concurrent technical tasks.
- Active DoD Security Clearance.
- High proficiency in MS Suite (Word, Excel, PowerPoint, MS Teams, OneNote, etc.).
- Ability to interface efficiently with team members and technical leads.
Technologies
eMASS, NIST RMF, CNSSI 1253, FISMA, DoN/DoW directives, STIGs, SRGs, MS Suite (Word, Excel, PowerPoint, MS Teams, OneNote), ATO/ATC, firewalls, IDS/IPS, endpoint protection, encryption
