IT SPECIALIST (INFOSEC)

Summary Click on "Learn more about this agency" button below for IMPORTANT additional information. The primary purpose of this position is to serve as the Information System Security Officer (ISSO), responsible for implementing, maintaining, and monitoring the cybersecurity posture of assigned information systems under the direction of the Information System Security Manager (ISSM). Salary ranges include local market supplements. Responsibilities Works directly with the Information System Security Manager to ensure that networked and stand-alone mission systems are operated and maintained in a secure manner. Manages and ensures compliance with cybersecurity standards, policies, and procedures across the assigned mission systems, maintaining the security and integrity of its networked and standalone information systems. Ensures that cybersecurity principles and requirements are tracked and implemented in all phases of the information life cycle, including acquisition and disposal. Presents and communicates technical information effectively through various mediums, including mission system meetings, reports, and briefings, and applies cybersecurity expertise to assigned mission systems. Requirements Conditions of Employment Qualifications This is a GG-12 position in the Defense Civilian Intelligence Personnel System (DCIPS). The GG-12 duties for the "Professional" work category are at the "Full Performance" work level and are equivalent to those at the GG-12 level. The selectee's salary will be set within the grade equivalent to a GS/GG grade based on the selectee's qualifications in relation to the job. In order to qualify, you must meet the specialized experience requirements described in the Office of Personnel Management (OPM) Qualification Standards for General Schedule Positions for the GG-2210, Information Technology (IT) Management Series (Alternative A). BASIC REQUIREMENT OR INDIVIDUAL OCCUPATIONAL REQUIREMENT: Experience must be IT related; the experience may be demonstrated by paid or unpaid experience and/or completion of specific, intensive training (for example, IT certification), as appropriate. For all positions individuals must have IT-related experience demonstrating each of the four competencies listed below. The employing agency is responsible for identifying the specific level of proficiency required for each competency at each grade level based on the requirements of the position being filled. 1. Attention to Detail - Is thorough when performing work and conscientious about attending to detail. 2. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services. 3. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. 4. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. In addition to meeting the basic requirement above, to qualify for this position you must also meet the qualification requirements listed below. EXPERIENCE REQUIRED: Your resume must reflect the quality level of experience which demonstrates the possession of the knowledge, skills, abilities, and competencies necessary for successful job performance required for this position. Examples of creditable experience include: knowledge of, and skill in applying, IT cybersecurity principles, concepts, and practices to perform a wide range of duties in support of the Information System Security Manager (ISSM). The role requires detailed practical knowledge of the Risk Management Framework (RMF) and its procedural application, including the ability to independently prepare, manage, and maintain all required Assessment &Authorization (A&A) documentation. This includes creating and updating System Security Plans (SSPs), Plans of Action & Milestones (POA&Ms), and other artifacts necessary to achieve system authorization. A comprehensive knowledge of system security concepts is required, including network security, access control, and vulnerability management. The position must apply this knowledge to implement security controls, analyze vulnerability scan results, review system audit logs, and direct system administrators in applying required patches and configurations. Note: Creditable experience may include previous military experience, experience gained in the private sector, or experience gained in another government agency. KNOWLEDGE, SKILLS AND ABILITIES (KSAs): Your qualifications will be evaluated on the basis of your level of knowledge, skills, abilities and/or competencies in the following areas: Knowledge of computer network security concepts, including network architecture, access control, and defense in-depth principles, sufficient to direct system administrators in applying secure configurations and to advise configuration control boards. Knowledge of the system development lifecycle and the ability to ensure cybersecurity principles and requirements are integrated and addressed in all phases of system change and modernization. Working knowledge of system vulnerability management, including the ability to manage compliance with security patches (e.g., IAVAs) and lead technical investigations of security events to determine root cause and mission impact. Knowledge of system security threats and attack vectors, including the skill to recognize anomalies in system behavior, audit logs, and network traffic that could indicate a security incident. Skill in applying and validating technical security controls and a comprehensive knowledge of the Risk Management Framework (RMF) process, including the development and maintenance of Assessment & Authorization (A&A) documentation (e.g., SSPs, POA&Ms). Skill in preparing and presenting clear and concise technical information, including security status reports, incident findings, and compliance data for the Information System Security Manager (ISSM) and other stakeholders. Ability to interpret and implement cybersecurity policies and procedures at the system level, and the skill to use security tools (e.g., scanners, audit log analyzers) to verify and enforce compliance. To view specialized experience click on the following link: Condition of Employment Continued: Position is designated special-sensitive and requires eligibility for access to Sensitive Compartmented Information (SCI), other intelligence-related Special Sensitive information, or involvement in Top Secret Special Access Programs (SAP) to fully perform the duties and responsibilities of the position. A non-disclosure agreement must be signed. Drug Testing: This position has been designated by the Air Force as a Testing Designated Position (TDP) under the Air Force Civilian Drug Demand Reduction Program. Employee must pass initial and periodic short notice drug testing. Illegal drug use by employees in sensitive positions presents a clear threat to the mission of the Air Force, national security, and public safety. PART-TIME OR UNPAID EXPERIENCE: Credit will be given for appropriate unpaid and or part-time work. You must clearly identify the duties and responsibilities in each position held and the total number of hours per week. VOLUNTEER WORK EXPERIENCE: Refers to paid and unpaid experience, including volunteer work done through National Service Programs (i.e., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community; student and social). Volunteer work helps build critical competencies, knowledge and skills that can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience. Education Additional Information Employed Annuitants (Reemployed Annuitants): Applicants in receipt of an annuity based on civilian employment in the Federal Service are subject to the DoD Policy on The Employment of Annuitants. Click here for more information. 120-Day Register: This announcement may result in a 120-day register that may be used to fill like vacancies for 120 days after the closing date. Applicants may be referred for consideration as vacancies occur. Direct Deposit: All federal employees are required to have direct deposit. Disabled veteran leave is available to a Federal employee hired on/after 5 Nov 2016, who is a veteran with a service-connected disability rating of 30% or more. For more information, click here. If you have questions regarding this announcement and have hearing or speech difficulties click here. Selectees who physically reside permanently in the U.S., the Commonwealth of Puerto Rico or Northern Mariana Islands, and the Possessions of the U.S., during the entire recruitment process (application, selection, and acceptance of a formal job offer) and selected for employment in the foreign area are eligible to receive certain foreign area benefits such as: Living Quarters Allowance (LQA) or government quarters, Post Allowance, Home Leave, etc. (subject to approval) Selectees who physically reside outside the U.S., the Commonwealth of Puerto Rico or Northern Mariana Islands, and the Possessions of the U.S., during any step of the recruitment process (application, selection, and acceptance of a formal job offer) will have foreign area benefits eligibility be determined on a case by case basis.