Aircraft Systems Cybersecurity Specialist Job Locations US-OH-WPAFB ID 2024-8640 Category Administrative Type Regular Full-Time Overview Credence is one of the largest and fastest growing privately-held government technology and services companies and is repeatedly acclaimed as a Top Workplace. As evidenced by our awards and certifications and maturity levels, as well as the agility and responsiveness, to tackle our customers' most challenging mission needs. We also offer comprehensive benefits including health insurance with dental and vision coverage, retirement savings plans with employer matching, paid time off, and opportunities for professional development and growth. Additionally, employees enjoy wellness programs, flexible work arrangements, and various discounts and perks to support their overall well-being and work-life balance. We are actively seeking an Aircraft Systems Cybersecurity Specialist who will be primarily responsible for supporting Air Force Life Cycle Management Center AFLCMC/EN Wright-Patterson AFB, OH. The Engineering Directorate (AFLCMC/EN-EZ) has the collective AFMC mission responsibility for preeminent engineering expertise to acquire and support war-winning capabilities. In order to meet current and projected workload requirements in support of AFLCMC/EN-EZ, the Government must augment its organic (military and civil service) capabilities with Advisory and Assistance Services (A&AS) support. AFLCMC/EN-EZ is headquartered at Wright-Patterson Air Force Base (WPAFB) OH with major units located at Eglin Air Force Base (AFB) FL, and Hanscom AFB, (HAFB) MA, as well as additional locations across the United States (US). The Engineering Directorate is currently organized into the following divisions. Responsibilities include, but are not limited to the duties listed below Provide PIT A&A support to assigned systems during the acquisition life cycle. The support includes developing, modifying, reviewing or coordinating PIT determination packages, Information Assurance Strategy (IAS) packages, Information Assurance Plans (IAP), System Security Plans (SSP), and artifacts for program reviews and Requests for Proposal (RFP). Execute the cybersecurity Risk Management Framework (RMF) to support A&A of assigned systems. The Contractor shall evaluate the technical implementation of the security design to ascertain that security software, hardware, and firmware features affecting confidentiality, integrity, availability, accuntability, and non-repudiation have been implemented as documented in the Director of Central Intelligence Directive (DCID) 6/3, Joint Air Force-Army-Navy (JAFAN) 6/3, National Institute of Standards and Technology (NIST) 800-53, and/or DoDI 8500.01. Review required program office artifacts and approval packages and make recommendations to support cybersecurity RMF analysis and recommendation to the Security Control Assessor (SCA). In order to support approval decisions, the Contractor shall assist the Government in development of a A&A report and a A&A presentation for each required system (PIT A&A approvals consist of the IATT and ATO). Staff each approval package through the requesting organization and the Engineering Directorate prior to submission and briefing to the AO. Perform cybersecurity site audits to verify the architecture analysis, cybersecurity requirements and controls, verify mitigation actions, witness cybersecurity testing and evaluation, and to support final approval for IATT and/or ATO. Document and report cybersecurity site audit findings and recommendations. Manage, plan, document and conduct Independent Verification and Validation (IV&V) of Information Assurance (IA) requirements for aircraft systems. IV&V support includes but is not limited to: Review