Cybersecurity Lead

Overview

At Credence, we support our clients' mission-critical needs, powered by technology. We provide cutting-edge solutions, including AI/ML, enterprise modernization, and advanced intelligence capabilities, to the largest defense and health federal organizations. Through partnership and trust, we increase mission success for war-fighters and secure our nation for a better future.

We are privately held, are repeatedly recognized as a top place to work, and have been on the Inc. 5000 Fastest Growing Private Companies list for the last 12 years. We practice servant leadership and believe that by focusing on the success of our clients, team members, and partners, we all achieve greater success.

This position supports the Foreign Military Sales - Army Case Execution System (FMS-ACES) Product Office. FMS-ACES is the first Defense Business System (DBS) program in the DoDI 5000.87 Software Acquisition Pathway, within PEO Enterprise, located in the Defense Integrated Business Systems (DIBS) portfolio.

FMS-ACES is a cloud-based Platform as a Service (PaaS) providing a user-centric journey design that will modernize the Army's FMS case execution and management processes from end to end. By stream-lining business processes, data standardization, integrated through state-of-the-art interface management, FMS-ACES will provide accurate case management and business analytics enabling real-time, accurate and informed data-drive decisions for Senior Leaders. FMS-ACES is in development and once fielded subsumes capabilities of a 50-year-old legacy system and consolidates two disparate systems into a single source of Army FMS data. The new system will exchange information with 26 distinct financial and logistic systems of record partners for end-to-end process execution. FMS-ACES will support 2000 users, incorporating 6,200 active FMS cases and 88,000 active requisitions.

Responsibilities include, but are not limited to the duties listed below

• Apply current information security technologies and best practices to ensure the confidentiality, integrity, and availability of corporate information assets in compliance with established standards and procedures.
• Continuously track regulatory changes, emerging threats, and evolving technologies to update security policies, standards, and compliance measures across the organization.
• Develop security engineering documentation, including briefs, white papers, architecture designs, and implementation plans to support cybersecurity re-engineering efforts.
• Provide expertise across the full spectrum of cybersecurity engineering activities, ensuring alignment with security frameworks and best practices.
• Define and document "As-Is" and "To-Be" cybersecurity architecture and systems security engineering requirements to support modernization efforts.
• Ensure acquired or developed systems comply with cybersecurity guidelines, conduct security reviews, identify architecture gaps, and develop risk management plans to assess security design adequacy in acquisition processes.
• Review and validate remediation plans for vulnerability scans/testing across hosts, networks, applications, static code, and open-source solutions. Develop Plans of Action & Milestones (POA&Ms) to address security gaps.
• Maintain expert knowledge of key cybersecurity regulations and frameworks, including:
  • Executive Orders 13556 (CUI), 13960 & 14110 (AI)
  • NIST Standards SP 800-171 (CMMC), SP 800-37 & 800-53 (FISMA RMF), SP 800-30 (Risk Assessment), SP -800-161 (C-SCRM), SP 800-218 (SSDF)
  • Federal & DoD Compliance FedRAMP, DFARS 252.204-7012 / -7019 / -7020 / -7021, DoDI 8510.01 (DoD RMF), DISA STIGs, DoD Cloud Computing Security Requirements Guide (CC SRG)
  • Encryption Standards FIPS 140-2 & 140-3 validated products and implementation guides

Education, Requirements and Qualifications

• Active Secret Clearance is mandatory
• Demonstrable experience in a Cybersecurity Lead, Subject Matter Expert (SME), or other advisory level position is mandatory
• Experience supporting a Project Management Office (PMO) within the Department of the Army Headquarters is highly preferred
• Experience as an Information System Security Manager (ISSM) or Information System Security Officer (ISSO) on DoD program
• Experience executing cybersecurity processes, procedures and RMF in an Agile environment
• Education and Experience:
  • Masters with 8+ years' experience in related field / capability
  • BA/BS with 10+ years' experience in related field / capability, or 12+ years equivalent experience in lieu of degree

Working Conditions and Physical Requirements

Please join us, as together we build a better world one mission at a time powered by Technology and its People!

#LI-Hybrid

#Credence #veteranemployment #militaryspouse #milspouse #hireavet #militaryveteran #militaryfriendly #transitioningmilitary #veterans #militarytransition #militaryfamilies #msep #militarytocivilian #military #federalcontractingjobs #defensecontracting #defenseindustryjobs