Assessment and Authorization Engineer B

Overview

At Credence, we support our clients’ mission-critical needs, powered by technology. We provide cutting-edge solutions, including AI/ML, enterprise modernization, and advanced intelligence capabilities, to the largest defense and health federal organizations. Through partnership and trust, we increase mission success for warfighters and secure our nation for a better future.

We are privately held, are repeatedly recognized as a top place to work, and have been on the Inc. 5000 Fastest Growing Private Companies list for the last 12 years. We practice servant leadership and believe that by focusing on the success of our clients, team members, and partners, we all achieve greater success.

Credence has an immediate opening for an Assessment and Authorization Engineer at the senior level to support the B-2 Division who is responsible for the modernization, test, production, fielding and sustainment of B-2 aircraft and related systems. The B-2 is a high demand, low density fleet that is 20+ years old, is undergoing numerous concurrent acquisitions to solve obsolescence issues, and delivers critical aerial denial/anti-access and nuclear capabilities at Whiteman AFB, MO.

Responsibilities include, but are not limited to the duties listed below:

• Implement and support Joint Special Access Program (SAP) Implementation Guide (JSIG), JSIG-related Risk Management Framework (RMF), and Information Protection (IP) concepts and processes for classified information systems.
• Design and recommend systems security controls and technical, personnel, and management solutions to satisfy information protection requirements, incorporating defense-in-depth, risk assessment, and systems life cycle principles.
• Assist in ensuring implementation of security measures for classified information systems in accordance with DoD directives, JSIG, RMF, NISPOM, and facility procedures.
• Support testing and evaluation of new operating systems, software, and hardware requested for use on information systems.
• Develop, implement, and maintain procedures to ensure JSIG, RMF, and NISPOM compliance; perform weekly information system audits; and notify Government Information Assurance Managers of risks and possible mitigations when full compliance is not possible.
• Conduct ongoing security reviews and tests of B-2 information systems to verify security features and operating controls are functional and effective.
• Use security-related software to detect malicious code, viruses, intruders, and other threats, as appropriate.
• Provide technical expertise to assist in applying and implementing JSIG requirements into the security structure of B-2 information systems.
• Support the maintenance and development of System Security Plans (SSPs), sanitization procedures, and program-designed hardware reviews.
• Assess, research, and recommend approval of hardware and software to the B-2 Government Information Assurance Manager.
• Produce and review documentation for the B-2 Program Office in support of acquisition, sustainment, information assurance, cybersecurity, and IA policy/procedure compliance activities.
• Provide technical expertise on computers, avionics systems, and information assurance support for B-2 modernization and sustainment efforts.
• Support coordination of security approval for sanitization and secured handling procedures for avionics line replaceable units, special laboratory equipment, and Special Test Equipment (STE).
• Assist in ensuring B-2 information systems are operated, maintained, and disposed of in accordance with internal security policies and practices outlined in the security plan.
• Assist in ensuring all users have required security clearances, authorization, need-to-know, and awareness of security responsibilities prior to being granted access to information systems.
• Report security-related incidents to the B-2 Government Information Assurance Manager and initiate approved protective or corrective measures when security incidents or vulnerabilities are discovered.
• Support periodic reviews to ensure compliance with SSPs and maintain configuration management documentation for security-relevant B-2 information system software, hardware, and…