IT CYBERSECURITY SPECIALIST (INFOSEC)

Full Job Description

This is a public notice flyer to notify interested applicants of anticipated vacancies. Applications will not be accepted through this flyer.

Interested applicants must follow the directions in the "How to Apply" section of this flyer to be considered. There may or may not be actual vacancies filled from this flyer.

Notice of Result letters will not be sent to applicants who respond to this flyer.

Applicants must have directly applicable experience that demonstrates the possession of knowledge, skills, abilities, and competencies necessary for immediate success in the position.

Qualifying experience may have been acquired in any public or private sector job, but will clearly demonstrate past experience in the application of the particular competencies or knowledge, skills and abilities necessary to successfully perform the duties of the position.

Such experience is typically in or directly relates to the work of the position to be filled. You must have IT-related experience demonstrating each of the four competencies listed below: 1.

Attention to Detail - Is thorough when performing work and conscientious about attending to detail.

Examples of experience demonstrating this competency include: Performing iterative and in-depth analysis of required or supporting artifacts early in a system's life cycle to assess the extent to which adequate security protections will be built into a system, including robustness of the system-level continuous monitoring plan.

2.

Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services.

Experience demonstrating this competency include: Alerting and advising customers of issues and changes that could affect their ability to maintain the confidentiality, integrity, and availability of their IT assets.

3.

Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately.

Examples of experience demonstrating this competency include: Communicating workload management objectives (priorities, deadlines, mission objectives) to team members, including contractors, on a continuing basis.

4. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations.

Examples of experience demonstrating this competency include: Identifying and assessing vulnerabilities, weaknesses, and potential shortfalls in terms of confidentiality, integrity, and availability of IT assets and associated data.

In addition to my experience demonstrating the four competencies above, I have qualifying experience such as: -Experience authoring and conveying highly technical information as well as explaining application of concepts and analytical processes that are particular to Risk Management Framework (RMF) to all customers and their teams.

-Experience managing IT projects, leading small group discussions, and technically documenting complex risk assessment issues, facilitating achievement of common positions or to persuade system owners to action.

-Experience identifying and utilizing all phases of the RMF, including analytical processes and procedures provided to assess and make recommendations as to authorization of customers' IT assets in accordance with instructions and related policies.

-Experience exercising technical expertise and insight into applications of IT Assets in support of the mission and continuing operations using established guidelines.

This position is within the Work Category PROFESSIONAL at Work Level SENIOR, Series and Grade GG-2210-13.

Additional qualifications information can be found from the following Department of Defense website: https://dodcio.defense.gov/Cyber-Workforce/CES.aspx Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., professional, philanthropic, religious, spiritual, community, student, social).

Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. Major Duties:

• You will serve as an IT Cybersecurity Specialist (INFOSEC) assigned to a branch of the Navy Authorizing Official (NAO), U.S. Fleet Cyber Command (USFLTCYBERCOM), located on the Department of Defense (DoD) Complex in Suffolk, VA.
• You will serve as the Emerging Technician and Special Programs lead responsible for investigating and evaluating the cybersecurity posture of a portfolio of supported Navy clients and their IT networks, systems, applications, circuits, and data.
• You will determine risk to mission and the Navy's portion of the Department of Defense Information Network (DoDIN) and author process improvement documentation in support of Fleet Cyber Command to secure, operate, and defend mission.
• You will conduct comprehensive review of Assessment and Authorization Risk Management Framework (RMF) risk artifacts performing assessments of residual risk and advise whether the risk is acceptable to allow the system to operate in Navy environment.
• You will work collaboratively to provide cybersecurity subject matter expertise in support of organizational effectiveness and processes to identify and track RMF issues that cannot be mitigated within an acceptable time.
• You will produce qualitative and quantitative information derived from a variety of sources, validate products, explain rationale for proposed exceptions, and recommend action by the Technical Director and/or Authorizing Official.