Industrial Security Analyst

Industrial Security Specialist (Traditional Reviewer)Duties As an Industrial Security Specialist (Traditional Reviewer) you will be responsible for the following duties:Conduct security compliance reviews at contractor facilities per federal standards.Conduct both technical (evaluation of technology) and non-technical (evaluation of people and operations) risk and vulnerability assessments in the Traditional Security technology area.Identify systemic security issues through analysis of vulnerability, configuration, and operational data.Review authorization and assurance documentation to confirm that the level of risk remains within acceptable parameters.Prepare audit reports that identify technical and procedural findings and provide recommended remediation strategies and solutions.Requirements Conditions of employmentMust be a US citizenSelective Service Requirement: Males born after 12-31-59 must be registered for Selective Service. For more information and supporting documents received by 11:59PM EST will be consideredThis is a Drug Testing designated positionPosition is a (DCIPS) position in the Excepted Service under U.S.C. 1601Work Schedule: Full TimeOvertime: OccasionallyTour of Duty: FlexiblePCS (Permanent Change of Station): Not AuthorizedFair Labor Standards Act (FLSA): ExemptFinancial Disclosure: RequiredTelework Eligibility: Supervisors may approve situational telework on a case-by-case, temporary basis for limited situations.If selected, the incumbent must obtain and maintain appropriate security clearance as indicated in job announcement.The incumbent is required to file and maintain a current OGE Form 450, Confidential Financial Disclosure Report, in compliance with 5 C.F.R. Part 2634.The incumbent is required to obtain and maintain the Security Fundamentals Professional Certification (SFPC) within six (6) months of appointment as conditions of employment.Position requires the legal and personal qualification to operate a motor vehicle.Qualifications The experience described in your resume will be evaluated and screened from the Office of Personnel Management's (OPMs) basic qualifications requirements. See: OPM qualification standards, competencies and specialized experience needed to perform the duties of the position as described in the MAJOR DUTIES and QUALIFICATIONS sections of this announcement by 08/31/2026 Applicant must have directly applicable experience that demonstrates the possession of the knowledge, skills, abilities and competencies necessary for immediate success in the position. Qualifying experience may have been acquired in any public or private sector job, but will clearly demonstrate past experience in the application of the particular competencies/knowledge, skills and abilities necessary to successfully perform the duties of the position. You must have specialized experience sufficient to demonstrate that you have acquired all the competencies necessary to perform at a level equivalent in difficulty, responsibility, and complexity to the next lower grade (GS/GG-12) in the Federal service and are prepared to take on greater responsibility. Generally, this would include one year or more of such specialized experience.Evaluating Traditional Security policies and assessing compliance using Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs).Performing comprehensive impact, threat, and risk assessments as part of a multidisciplinary security team.Preparing detailed security audit reports that identify technical and procedural findings, and recommending corrective actions.Applying risk management processes (e.g., Risk Management Framework) to assess and mitigate risks, ensuring compliance with laws, regulations, and guidelines for securing personnel, facilities, and classified information.Specifically you will be evaluated on the following competencies: 1. Cybersecurity Threat Mitigation: Expertise in protecting classified information and critical technologies from foreign intelligence threats. 2. Technical Security Assessments (STIGs/SRGs): Proficient in technical assessments using DOD STIGs/SRGs or other assessment criteria to identify network and system vulnerabilities. 3. Risk & Vulnerability Evaluation: Skilled in assessing technical and operational risks to identify systemic security issues. 4. Emergency Response: Proven ability to quickly develop incident response plans for high-visibility security incidents. 5. Collaborative Security Analysis: Experienced collaborating with experts to enhance security assessments and threat mitigation. 6. Clear Communication: Ability to clearly communicate complex security findings in reports and presentations.