IT CyberSecurity Specialist (Data Security)

Summary

The incumbent serves as OAIT's Senior Data Security Analyst responsible for ensuring the security of information systems through implementation and assessment of risk-based cybersecurity controls, in compliance with EOP requirements, Federal regulations, industry best practices, and requirements set forth by organizational entities.

Duties

• As an IT CyberSecurity Specialist (Data Security), GS-2210-12, your typical work assignments may include the following: Implement automated technical security controls across diverse information systems, including security incident and event management monitoring, vulnerability scanning, and access management. Serve as an expert on the system authorization process, performing assessments and offering peer oversight to assessments performed by others to ensure accurate and comprehensive reviews of technical security controls. Identify risks to EOP systems and coordinate with technical stakeholders to implement risk mitigations. Provide communication to technical and non-technical stakeholders on findings from assessments and continuous monitoring activities to ensure organizational awareness of system security risks. Identify and recommend enhancements to EOP security controls to address emerging vulnerabilities, threats, technological advancements, and emerging trends.

Qualifications

MINIMUM QUALIFICATION REQUIREMENTS All applicants must meet the qualification requirements outlined below to be considered minimally qualified for this position. The qualification requirements are in accordance with the OPM Qualification Standards. ALL QUALIFICATIONS MUST BE MET BY THE CLOSING DATE OF THIS ANNOUNCEMENT. BASIC REQUIREMENTS: Applicants must meet one of the following criteria listed below in order to meet the basic requirement for the IT CyberSecurity Specialist position, 2210. Attention to Detail - Is thorough when performing work and conscientious about attending to detail. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. -AND- SPECIALIZED EXPERIENCE: In addition to the Basic Requirements above, applicants must have a minimum of one year of specialized experience at a level of difficulty and responsibility comparable to the next lower grade or comparable pay band in the Federal service or equivalent experience in the private sector. You may qualify at the GS-12 level, if you fulfill the following qualification requirement: One full year of specialized experience equivalent to the GS-11 grade level in the Federal service or equivalent experience in the private sector which demonstrates all of the following: 1) Implementing and maintaining technical system security controls, such as logging and monitoring, vulnerability scanning, configuration management, and access control; 2) Communicating threats, vulnerabilities, and risks to technical and non-technical stakeholders; 3) Performing continuous monitoring of information systems through review of open source vulnerability information, vulnerability scanning, and ongoing system assessments; 4) Performing system security assessments, including experience executing assessments as part of system authorization to operate processes; and 5) Maintaining compliance with internal policies and procedures and applicable laws, regulations, and standards in securing information systems. Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience.

Education

This position does not have an education requirement.

Required documents

To apply for this position, you must submit a complete Application Package which includes: 1. Resume: For qualification determinations, your resume must contain hours worked per week and dates of employment (i.e., month/year to month/year or month/year to present). If your resume does not contain this information, your application may be marked as insufficient and you will not receive consideration for this position. If you are a current Federal employee or previous Federal employee, provide your pay plan, series and grade, i.e. GS-0301-09. Your resume must include detailed information as it relates to the responsibilities and specialized experience for this position. Evidence of copying and pasting directly from the vacancy announcement without clearly documenting supplemental information to describe your experience will result in an ineligible rating. This will prevent you from receiving further consideration. Note: If you upload more than one resume, the last resume received will be the one utilized for consideration. Please limit your resume to 2 pages. If more than 2 pages are submitted, only the first 2 pages will be reviewed to determine your eligibility/qualifications. If you choose to use your own resume, curriculum vitae, or any other written form you choose, then you must ensure it contains all of the required information and you organize it so we can associate the following information for each experience/position: Job title Name of employer Beginning and ending dates of employment (month/day/year format) Hours worked per week. We will assume full-time unless otherwise stated. We will prorate part-time employment in crediting experience. Detailed description of job duties for each job held, accomplishments, related skills, and responsibilities to include any supervisory/managerial responsibilities and number of staff supervised (if applicable) Your resume must show the series and grade or equivalent for all federal positions you have held (if a federal position). 2. A complete Assessment Questionnaire 3. Other supporting documents to be submitted with application: DD214: Veterans' Preference Documentation, if applicable, a DD-214 Member 4 copy, which shows type of discharge. If still active, provide an official Statement of Service. Any other documentation such as VA letter documenting disability, SF-15, and any other required supporting documentation based your veterans' preference claim. SF-50: Federal applicants must submit an SF-50 (Notification of Personnel Action) that shows your most recent Promotion, Within Rate Increase (WRI/WGI), or Appointment/Conversion (if applying as a current or former Federal Employee) showing you are/were in the competitive service and the highest grade or promotion potential held. Do not use Award actions. If you are an EOP employee you may obtain a copy of your SF-50 from OPF or eOPF. If you have separated from Federal Government employment, you may obtain a copy of your SF-50 via: National Personnel Records Center, Annex, 1411 Boulder Boulevard, Valmeyer, IL, 62295; FAX (618) 935-3014; Email [email protected]; or visit the https://www.archives.gov/personnel-records-center/new-nprc. Peace Corps volunteers must submit a copy of your "Description of Service (DOS)" in lieu of the SF-50. If you do not have one you should email the Peace Corps Office of Volunteer and PSC Financial Services at [email protected]. If you are currently serving in a pay banded position, please include a copy of your pay band chart with your application. College transcripts (if the position has a positive education requirement, or you are qualifying on the basis of education). If your education was completed outside of the U.S., you must submit a transcript or an official evaluation of your education (e.g., from a NACES accredited organization) that is in English. Documents submitted as part of the application package, to include supplemental documents, may be shared beyond the Human Resources Office. Some supplemental documents contain personal information such as SSN and DOB and some documents such as military orders and marriage certificates may contain personal information for someone other than you. You may sanitize these documents to remove said personal information before you submit your application.