Assessment and Authorization Engineer B-2 01.06.17

About the role

Credence supports the mission-critical needs of the largest defense and health federal organizations. We provide cutting-edge solutions, including AI/ML, enterprise modernization, and advanced intelligence capabilities.

Responsibilities

• Implement and support Joint Special Access Program (SAP) Implementation Guide (JSIG), JSIG-related Risk Management Framework (RMF), and Information Protection (IP) concepts and processes for classified information systems
• Design and recommend systems security controls and technical, personnel, and management solutions to satisfy information protection requirements, incorporating defense-in-depth, risk assessment, and systems life cycle principles
• Affirm implementation of security measures for classified information systems in accordance with DoD directives, JSIG, RMF, NISPOM, and facility procedures
• Support testing and evaluation of new operating systems, software, and hardware requested for use on information systems
• Develop, implement, and maintain procedures to ensure JSIG, RMF, and NISPOM compliance; perform weekly information system audits; and notify Government Information Assurance Managers of risks and possible mitigations when full compliance is not possible
• Conduct ongoing security reviews and tests of B-2 information systems to verify security features and operating controls are functional and effective
• Use security-related software to detect malicious code, viruses, intruders, and other threats, as appropriate
• Provide technical expertise to assist in applying and implementing JSIG requirements into the security structure of B-2 information systems
• Support the maintenance and development of System Security Plans (SSPs), sanitization procedures, and program-designed hardware reviews
• Assess, research, and recommend approval of hardware and software to the B-2 Government Information Assurance Manager
• Produce and review documentation for the B-2 Program Office in support of acquisition, sustainment, information assurance, cybersecurity, and IA policy/procedure compliance activities
• Support coordination of security approval for sanitization and secured handling procedures for avionics line replaceable units, special laboratory equipment, and Special Test Equipment (STE)
• Afford technical expertise on computers, avionics systems, and information assurance support for B-2 modernization and sustainment efforts
• Maintain and dispose of B-2 information systems in accordance with internal security policies and practices outlined in the security plan
• Support periodic reviews to ensure compliance with SSPs and maintain configuration management documentation for security-relevant B-2 information system software, hardware, and firmware
• Notify the B-2 Government Information Assurance Manager when systems no longer process intelligence or SAP information, or when changes may affect B-2 WSSC information system accreditation
• Implement security controls and safeguards, including management, personnel, operational, and technical controls, to support integrity, availability, and confidentiality in accordance with OMB Circular A-130 and NIST SP 800-53 Rev. 4
• Apply information security best practices and industry standards to protect data from unauthorized access, use, disclosure, destruction, modification, or disruption in accordance with NIST SP 800-115
• Evaluate privacy and security economics, security options, cost-benefit analysis, break-even analysis, and life cycle cost considerations to recommend effective and efficient security measures in accordance with NIST SP 800-65 Rev. 1
• Evaluate physical security measures designed to prevent unauthorized physical access to buildings, facilities, resources, and stored information, including conceptual attack diagrams and hostile act resistance considerations
• Support security assessment and authorization activities by applying knowledge of DoD RMF processes, information security requirements, security solutions, and DoD information system security management
• Integrate program protection engineering processes to mitigate and manage risks from foreign collection, design vulnerability, supply chain exploitation or insertion, battlefield loss, and unauthorized or inadvertent disclosure throughout the acquisition life cycle
• Prepare and maintain the B-2 Program Protection Plan (PPP), including identification and criticality analysis for Critical Program Information (CPI) and critical technology protection
• Serve as a program focal point for threat analysis and assessment activities required by the DoD acquisition community, including support to System Threat Assessment Report/System Threat Assessment preparation, evaluation, maintenance, and validation
• Evaluate vulnerability assessment procedures, tools, and techniques to identify system vulnerabilities, assess severity, recommend mitigations or countermeasures, and support program protection processes
• Support risk assessment methodology activities to identify, assess, and mitigate potential program impacts
• Support program protection countermeasure implementation, including anti-tamper techniques and documentation, information assurance management, software assurance, supply chain risk management, and security management requirements across the acquisition life cycle
• Apply familiarity with DoDI 5200.39 and horizontal protection techniques to support consistent classification, export control, foreign disclosure, anti-tamper, information assurance, and physical security standards for Critical Program Information
• Apply familiarity with the 2011 National Defense Authorization Act to support development and incorporation of technology protection features during R&D and international acquisition considerations
• Apply understanding of DoD, Air Force, and common engineering/scientific principles, processes, and procedures to improve performance and sustainability of existing and future Air Force and joint service weapon systems
• Translate AFGSC and ACC requirements into weapon system requirements used to design, develop, fabricate, test, evaluate, field, and deploy weapon systems, subsystems, and equipment
• Support requirements development, technology needs, action plans, and policies necessary to improve and retain manufacturing, operations, re-manufacturing, and demilitarization/disposal capabilities for USAF weapon systems
• Assist with technical and mission analyses of current and future operational requirements, system concept development, technological/trade-off assessments, materiel solution analyses, and design reviews
• Develop draft documentation and presentation materials as requested or required by programmatic cost, schedule, and performance limits
• Support project team meetings, working groups, and technical reviews, including SRR, SFR, PDR, CDR, IDR, TRR, SVR, TCM, TIMs, FCA, PCA, PRR, PMR, and other applicable reviews
• Analyze equipment and software deficiencies; recommend corrective actions; and develop, integrate, and test equipment and software deficiency solutions
• Serve in an advisory role for program source selections on engineering-related requirements, as required
• Support development and evaluation of IMP, IMS, Systems Engineering Detail Schedule, and engineering cost estimates
• Support system safety engineering activities, including mishap risk assessments, contractor safety proposal and analysis evaluations, safety concern reviews, and resolution of high-priority safety issues
• Support disciplined engineering activities to assure Operational Safety, Suitability, and Effectiveness (OSS&E), including LCSE process implementation, OSS&E compliance, baseline document updates, metric reporting, and coordination with other organizations
• Afford System Engineering Plan (SEP) implementation status throughout program operations and notify the Air Force of shortfalls or gaps requiring corrective action
• Support the Air Force in establishing Hardness Maintenance/Hardness Surveillance in accordance with Defense Nuclear Agency-H-93-140 and implementing Air Force Pamphlet 91-118 nuclear weapon system safety design and evaluation criteria

Requirements

Must have a Top-Secret clearance

Must have an ABET accredited Master's or Doctorate Degree in a related field and ten (10) years of experience in the respective technical/professional discipline being performed, five (5) years of which must be in the DoD; OR must have an ABET accredited bachelor's degree in a related field and twelve (12) years of experience in the respective technical/professional discipline being performed, five (5) years of which must be in the DoD;

For engineering positions, must have successfully completed an undergraduate degree with a major in engineering from a college or university with an ABET-accredited engineering program for the degree requirements of the position, such as electrical, mechanical, or aerospace engineering. Degrees in engineering technology are not considered qualifying for these positions

For computer science positions, it is recommended that the candidate have successfully completed an undergraduate or graduate degree with a major in computer science from a college or university with an ABET-accredited computer science program for the degree requirements of the position