It Cybersecurity Specialist (Infosec)

As a CYBERSECURITY INFORMATION TECHNOLOGY SPECIALIST (INFOSEC), CYBER CODE 541, you will be responsible for the following duties:

• Perform assessments/inspections/reviews at contractor facilities in accordance with established DoD policies that include industrial security procedures, systems, standards, and regulations governing the safeguarding of classified information.
• Evaluate technical & operational risks/vulnerabilities in IT environments: networks, systems, applications, & infrastructure. Protect assets by identifying weaknesses.
• Review authorization and assurance documents to confirm that the level of risk is within acceptable limits for each software application, system, and network.
• Provide an accurate technical evaluation of the software application, system, or network, documenting the security posture, capabilities, and vulnerabilities against relevant cybersecurity compliances.
  

Experience must be IT related; the experience may be demonstrated by paid or unpaid experience and/or completion of specific, intensive training (for example, IT certification), as appropriate

GS-5 through GS-15 (or equivalent): For all positions individuals must have IT-related experience demonstrating each of the four competencies listed below. The employing agency is responsible for identifying the specific level of proficiency required for each competency at each grade level based on the requirements of the position being filled.

1. Attention to Detail - Is thorough when performing work and conscientious about attending to detail.
2. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services.
3. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately.
4. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations.

and

Specialized Experience for GS-7 (or equivalent) and Above: Positions at GS-7 (or equivalent) and above require one year of specialized experience at the next lower GS-grade (or equivalent). Specialized experience is experience that has equipped the applicant with the particular competencies/knowledge, skills, and abilities to successfully perform the duties of the position and is typically in or related to the work of the position to be filled. Such experience is typically gained in the IT field or through the performance of work where the primary concern is IT. The employing agency is responsible for defining the specialized experience based on the requirements of the position being filled.

• Using Security Technical Implementation Guides (STIGs) to assess technology areas such as networks, endpoint security, vulnerability scanning, DNS, operating systems, or databases.
• Utilizing knowledge of cybersecurity principles, networking concepts, and security methodologies to perform impact and risk assessments.
• Preparing audit reports that identify technical and procedural findings with recommended remediation strategies.
• Utilizing risk management processes for assessing and mitigating risk.