Cybersecurity Specialist (EMASS) - PNT

Credence•Aberdeen Proving Ground, MD

2h•Onsite

About The Position

At Credence, we support our clients’ mission-critical needs, powered by technology. We provide cutting-edge solutions, including AI/ML, enterprise modernization, and advanced intelligence capabilities, to the largest defense and health federal organizations. Through partnership and trust, we increase mission success for war-fighters and secure our nation for a better future. We are privately held, are repeatedly recognized as a top place to work, and have been on the Inc. 5000 Fastest Growing Private Companies list for the last 12 years. We practice servant leadership and believe that by focusing on the success of our clients, team members, and partners, we all achieve greater success. Credence has an immediate need for a Cybersecurity Specialist (EMASS) at the senior level to support the Army Positioning, Navigation and Timing (PM PNT) System Engineering and Technical Assistance (SETA) Program at Aberdeen Proving Grounds, MD.

Requirements

Active Secret clearance required with the ability to obtain Top Secret; TS/SCI eligibility required.
Bachelor’s degree in Cybersecurity, Information Technology, or related field with approximately 7 years of experience OR 11 years of cybersecurity experience supporting DoD IT environments and systems.
Demonstrated ISSO or Cybersecurity Engineer experience supporting DoD or Army acquisition programs.
Meets DoDM 8570.01 IAM Level I baseline certification requirements, including one of the following: CAP, Cloud+, GSLC, Security+ CE, HCISPP.
CISSP certification required.
Strong knowledge of DoD, Federal, and U.S. Army cybersecurity policy, RMF, and acquisition frameworks.
Hands-on experience with RMF, eMASS, STIGs, and ACAS.
Experience supporting Configuration Management processes and ECP reviews within an acquisition environment.
Knowledge of information security, information assurance, and auditing practices.
Experience with cybersecurity and information assurance tools and methodologies.
Familiarity with acquisition documentation and lifecycle processes.
Excellent written and verbal communication skills with the ability to collaborate across technical and non-technical stakeholders.

Nice To Haves

Note: Security+ CE is the most commonly held certification; Cloud+ is also frequently accepted for IAM Level I roles.

Responsibilities

Develop and maintain acquisition cybersecurity strategies supporting Milestone Decisions, program milestones, and full product lifecycles, including Cybersecurity Strategy and Clinger-Cohen Act compliance.
Prepare, review, and maintain classified and unclassified cybersecurity acquisition documentation, including SEP, TEMP, and acquisition strategies.
Serve as the cybersecurity functional lead in Configuration Management, reviewing and approving Engineering Change Proposals (ECPs).
Provide Information System Security Engineering (ISSE) recommendations to vendors to enhance system security, resilience, and compliance.
Coordinate, lead, and support cybersecurity developmental and operational testing activities, including CTTX, CVI, ACDT, CVPA, and Adversarial Assessments (AA).
Develop and maintain RMF eMASS Assess Only packages for tactical PIT devices, coordinating STIG development and ACAS scan execution with vendors.
Plan, document, and execute Assessment and Authorization (A&A) activities, including risk assessments, vulnerability analysis, POA&M development, and security control validation.
Support and document vulnerability and susceptibility assessments, including Assess Only and Interim Authority to Test (IATT) packages.
Identify, analyze, and resolve cybersecurity, software assurance, and information assurance issues across systems and product lines.
Integrate cybersecurity requirements into system engineering processes, including requirements, interface documentation, engineering plans, training plans, and test plans.
Participate in system architecture design and reviews to ensure scalability, reliability, and secure network operations.
Draft network transition plans and support enterprise network operations and troubleshooting across geographically dispersed environments.
Serve as the primary cybersecurity point of contact, collaborating with cross-functional teams, vendors, and stakeholders.
Participate in Integrated Product Teams (IPTs), PM PNT forums, and technical reviews (SRR, PDR, CDR, PRR, FCA, PCA).
Coordinate cybersecurity reporting and operational impact analysis with PEOs, ASA(ALT), and ARCYBER, including cyber event tracking.
Analyze Army cyber operational orders and ensure reporting of emerging threats and mission impacts.
Assist in drafting acquisition documentation (SOO, SOW, PWS) and support proposal evaluations.
Monitor cyber defensive measures and support formal Information Assurance program development and execution.
Leverage automation and AI-enabled solutions to improve cybersecurity engineering processes and efficiency.