Assessment and Authorization Engineer B

Assessment And Authorization Engineer

At Credence, we support our clients' mission-critical needs, powered by technology. We provide cutting-edge solutions, including AI/ML, enterprise modernization, and advanced intelligence capabilities, to the largest defense and health federal organizations. Through partnership and trust, we increase mission success for warfighters and secure our nation for a better future.

Credence has an immediate opening for an Assessment and Authorization Engineer at the senior level to support the B-2 Division who is responsible for the modernization, test, production, fielding and sustainment of B-2 aircraft and related systems. The B-2 is a high demand, low density fleet that is 20+ years old, is undergoing numerous concurrent acquisitions to solve obsolescence issues, and delivers critical aerial denial/anti-access and nuclear capabilities at Whiteman AFB, MO.

Responsibilities include, but are not limited to the duties listed below:

• Implement and support Joint Special Access Program (SAP) Implementation Guide (JSIG), JSIG-related Risk Management Framework (RMF), and Information Protection (IP) concepts and processes for classified information systems.
• Design and recommend systems security controls and technical, personnel, and management solutions to satisfy information protection requirements, incorporating defense-in-depth, risk assessment, and systems life cycle principles.
• Assist in ensuring implementation of security measures for classified information systems in accordance with DoD directives, JSIG, RMF, NISPOM, and facility procedures.
• Support testing and evaluation of new operating systems, software, and hardware requested for use on information systems.
• Develop, implement, and maintain procedures to ensure JSIG, RMF, and NISPOM compliance; perform weekly information system audits; and notify Government Information Assurance Managers of risks and possible mitigations when full compliance is not possible.
• Conduct ongoing security reviews and tests of B-2 information systems to verify security features and operating controls are functional and effective.
• Use security-related software to detect malicious code, viruses, intruders, and other threats, as appropriate.
• Provide technical expertise to assist in applying and implementing JSIG requirements into the security structure of B-2 information systems.
• Support the maintenance and development of System Security Plans (SSPs), sanitization procedures, and program-designed hardware reviews.
• Assess, research, and recommend approval of hardware and software to the B-2 Government Information Assurance Manager.
• Produce and review documentation for the B-2 Program Office in support of acquisition, sustainment, information assurance, cybersecurity, and IA policy/procedure compliance activities.
• Provide technical expertise on computers, avionics systems, and information assurance support for B-2 modernization and sustainment efforts.
• Support coordination of security approval for sanitization and secured handling procedures for avionics line replaceable units, special laboratory equipment, and Special Test Equipment (STE).
• Assist in ensuring B-2 information systems are operated, maintained, and disposed of in accordance with internal security policies and practices outlined in the security plan.
• Assist in ensuring all users have required security clearances, authorization, need-to-know, and awareness of security responsibilities prior to being granted access to information systems.
• Report security-related incidents to the B-2 Government Information Assurance Manager and initiate approved protective or corrective measures when security incidents or vulnerabilities are discovered.
• Support periodic reviews to ensure compliance with SSPs and maintain configuration management documentation for security-relevant B-2 information system software, hardware, and firmware.
• Monitor system recovery processes to confirm security features and procedures are properly restored.
• Assist in ensuring all B-2 information system security documentation is current and accessible to properly authorized individuals.
• Notify the B-2 Government Information Assurance Manager when systems no longer process intelligence or SAP information, or when changes may affect B-2 WSSC information system accreditation.
• Ensure system security requirements are addressed throughout all phases of the system life cycle and support authorization of software, hardware, and firmware prior to implementation.
• Implement security controls and safeguards, including management, personnel, operational, and technical controls, to support integrity, availability, and confidentiality in accordance with OMB Circular A-130 and NIST SP 800-53 Rev. 4.
• Apply information security best practices and industry standards to protect data from unauthorized access, use, disclosure, destruction, modification, or disruption in accordance with NIST SP 800-115.
• Evaluate privacy and security economics, security options, cost-benefit…