About This Role
This role involves a wide range of Information Technology (IT) management activities, focusing on information security for installation infrastructure or major organizational components. The specialist will serve as an Information Security (INFOSEC) administrator, managing network security scanning and monitoring.
Responsibilities
- Conduct Information Assurance Vulnerability Management (IAVM) network security scanning using Assured Compliance Assessment Solution (ACAS) scan tool, ArcSight data security analytics, and Host Based Security System (HBSS)
- Monitor and identify network and system vulnerabilities
- Manage specialty filters, sensors, and/or devices (both network and host based) designed to monitor and/or counter specific threats
- Coordinate and ensure continued compliance with applicable policy for the security, configuration, operation, maintenance, and installation of Intrusion Detection System (IDS)/Intrusion Prevention Systems (IPS); firewalls; Virtual Private Networks (VPN); Host Based Security System (HBSS); Secure Configuration Compliance Validation Initiative (SCCVI) / Secure Configuration Remediation Initiative (SCRI); System Center Configuration Manager (SCCM)/ System Center Operations Manager (SCOM) / System Management Server (SMS); and Anti-Virus Servers
- Conduct vulnerability scans and network security assessments/reports
- Ensure IAVA(s) and vulnerability assessments are generated and disseminated to appropriate technical personnel within the area of responsibility (AOR)
- Track progress towards the application of IAVA(s) and vulnerability assessments
Requirements
- At least one year of experience in enforcing and monitoring an Information Assurance/Cybersecurity Vulnerability Management (IAVM) Program
- Experience in ensuring continuous network security compliance through the use of various vulnerability scanning, monitoring, and reporting tools
- Experience in responding to a variety of network security related incidents
- Ability to research and interpret higher level policies and directives in order to make informed decisions
- Ability to brief Chain of Command on current threats or incidents affecting areas of responsibility
- Participation in various network security or accreditation related inspections
- Ability to deliver timely and courteous customer service per defined standards
- Attention to Detail: Conscientious and attends to detail when planning, prioritizing, and assisting with the daily workflow across the spectrum of Information Technology functions and resources
- Customer Service: Diagnose and resolve problems in response to customer reported problems
- Oral Communication: Advise on information systems management and provide staff with technical advice on operations and maintenance of the automated system
- Problem Solving: Ability to respond to complex issues and assisting staff on day to day Information Technology support and issues
- Information Assurance Vulnerability Management Program Management competency
- Monitor System/Network Cybersecurity competency
- Oral/Written Communication competency
- Foreign education must be evaluated for U.S. equivalency in order to be considered for this position
- Only degrees from an accredited college or university recognized by the Department of Education are acceptable to meet positive education requirements or to substitute for experience
Important Details
- Time in Grade Requirement: Applicants who have held a General Schedule (GS) position within the last 52 weeks must have 52 weeks of Federal service at the second lower grade (or equivalent).
Application Process
- Submit a copy of your latest non-award SF-50/NPA that reflects your highest grade held on a permanent basis along with your application/resume package to support the time in grade (TIG) requirement
- Refer to the assessment questionnaire under Basic Education Requirements OR Minimum Qualifications for the entire list of education and combination of education/experience requirements
