IT CYBERSECURITY SPECIALIST (INFOSEC)

Full Job Description

This position is being recruited under 10 USC 1599f into the Cyber Excepted Service and does NOT convey eligibility to be converted to the Competitive Service.

It has been identified as a position necessary to carry out and support the mission of the US Cyber Command.

It is in the Professional Work Category at the Senior Work Level within the CES Occupational Structure. It is located in the DISA-EII/JT INTEROPERABILITY TEST CMD.

In order to qualify for this position, you must meet the requirements described below.

Basic Requirements: Attention to Detail - Experience reviewing my own information technology-related work or data and have been asked by others to review their work or data to ensure accuracy, completeness, and consistency with standards.

Customer Service - Experience maintaining relationships with customers, assessing current information technology needs of customers, and developing or identifying information technology products and services that are tailored to meet customer needs.

Oral Communication - Briefing mid-level management and IT staff on the status of information technology systems, projects, or daily operations, including the communication of technical information to a non-technical audience.

Problem Solving - Identifying alternatives to address complex information technology-related issues by gathering and applying information from a variety of sources that provide a number of potential solutions.

Qualifying Experience: To qualify at the GG-12, your resume must describe at least one year of experience that demonstrates the competencies necessary for immediate success in the position.

Experience refers to any paid or unpaid experience, including volunteer work and Military service, that would be considered equivalent to work normally performed at the next lower grade level in the federal service.

For this position, qualifying experience is defined as: GG-12 Experience in Computer networking concepts and protocols, and network security methodologies, risk management processes, national and international laws, regulations, policies and cyber threats and vulnerabilities.

Qualifying Experience: To qualify at the GG-13, your resume must describe at least one year of experience that demonstrates the competencies necessary for immediate success in the position.

Experience refers to any paid or unpaid experience, including volunteer work and Military service, that would be considered equivalent to work normally performed at the next lower grade level in the federal service.

For this position, qualifying experience is defined as: GG-13 Experience in network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth) computer networking concepts and network security methodologies, risk management processes, national and international laws, regulations, policies and cyber threats and vulnerabilities.

Candidates must describe how they meet the qualifying experience and/or selective placement factor(s) within the body of their resume.

All qualifications must be met within 30 days after the closing date of this announcement. Major Duties:

• Serves as principal technical authority for cyber testing operations, leading developmental vulnerability assessments, and operational, cyber survivability testing efforts.
• Develops comprehensive test strategies and plans to assess and ensure system security, interoperability, and data integrity across multiple platforms.
• Analyzes testing and security audit data to identify vulnerabilities, assess the operational impact of security events, and recommend corrective actions.
• Establishes and directs a quality assurance program for all testing activities, ensuring rigorous evaluation of system backups, recovery processes, and overall cyber survivability.
• Interprets and applies policy to the planning and execution of multi-disciplinary cyber tests and audits for assigned systems and applications.
• Utilizes deep knowledge of emerging threats and technologies to enhance testing protocols and ensure the resilience of the enterprise IT architecture against cyber attacks.