Information Technology Specialist (Information Security)

U.S. Marine Corps•Quantico, VA

13h

About The Position

Marine Corps Community Services (MCCS) is seeking an Information Technology Specialist focused on information security. The role protects the confidentiality, integrity, and availability of systems, networks, and data through the planning, development, implementation, maintenance, and improvement of information security programs, policies, procedures, and tools. It covers network and application security across multiple platforms and diverse system environments, including WAN, LAN, and WLAN environments. The specialist monitors security activity, assesses risks and vulnerabilities, investigates incidents, recommends corrective actions, and installs and configures security tools and network equipment. The position also contributes to security planning, documentation, compliance, disaster recovery, and incident response. The incumbent serves on an Incident Response Team, coordinates with the USMC, and requires access to classified information. This is a mixed position with physical requirements to lift and carry objects up to 45 pounds independently and heavier objects with assistance. The position is designated Non-critical Sensitive. The incumbent must be able to obtain and maintain an ANACI/Tier 3 Secret clearance. Security+ certification is required as a condition of access within six months of employment, followed by annual Information Assurance awareness training. The announcement states that selectees may be changed to part-time or full-time at management’s discretion.

Requirements

Six years of progressively technical experience in information security; applicable education may substitute for years of experience.
At least three years of hands-on experience securing enterprise environments.
Knowledge of concepts and principles involving routers, switches, firewalls, security hierarchy, encryption key infrastructures, and authentication processes.
Ability to relate business requirements and risks to technology implementation for network security.
Strong analytical and problem-solving skills.
Strong oral and written communication skills.
Must obtain Security+ certification within six months of employment as a condition of access to Department of Defense information systems, and complete annual Information Assurance awareness training thereafter.
Must successfully complete a security clearance process and be able to obtain and maintain an ANACI/Tier 3 Secret clearance to access classified information.
Ability to lift and carry objects up to 45 pounds independently and objects over 45 pounds with assistance.
Submit a resume no longer than two pages; resumes exceeding two pages will not be referred.

Nice To Haves

Experience with Cisco, Microsoft, and UNIX-based systems, client/server applications, and network engineering.
Industry certifications such as Microsoft server and workstation (MCSE), Red Hat Certified Engineer (RHCE), ISACA CISA, Security+, CySA+, CCNA, CEH, CISSP, or Security X (CASP) are highly preferred.

Responsibilities

Protect the confidentiality, integrity, and availability of systems, networks, and data by planning, analyzing, developing, implementing, maintaining, and enhancing information security programs, policies, procedures, and tools.
Analyze network security risks and recommend appropriate data security procedures and products.
Monitor network and application security and implement security standards, procedures, and guidelines across multiple platforms and system environments.
Review the development, testing, and implementation of network security plans, products, and control techniques.
Direct, coordinate, and facilitate information security activities; coordinate work to ensure policy compliance, deadlines, proper execution, and operational efficiency.
Provide technical advice and guidance on unusual, controversial, or complex security problems.
Analyze processes, procedures, service effectiveness, and economy, and recommend improvements.
Participate in short- and long-term planning and advise on relationships among functions, operations, and programs that may affect costs and resources or improve coordination.
Monitor and review operation logs and event console activity to identify potential security events.
Investigate data security incidents and recommend corrective actions.
Install and configure firewalls, network monitoring tools, applications, and automated tools for monitoring network logs and events.
Develop and maintain network disaster plans, processes, and procedures.
Consult with IT technical staff to install and configure hardware and software systems that provide appropriate network security.
Document network security policies.
Conduct risk and vulnerability assessments to identify risks and protection needs in WAN, LAN, and WLAN environments.
Maintain awareness of applicable Marine Corps, Department of Defense, and other information security policies and regulations; identify regulatory changes affecting security policies, standards, and procedures.
Develop system security evaluations and contingency plans for recovering digital information.
Gather evidence for possible prosecution of computer crimes or reprimand for technology abuse.
Identify and report security scans, vulnerabilities, and remediation efforts to the Marine Corps Cyber Operations Group.
Serve on the Incident Response Team, coordinating with USMC and handling duties requiring access to classified information.
Provide courteous, friendly customer service; identify customer needs, verify and resolve problems, check satisfaction, act promptly on issues, and seek help from a supervisor or appropriate contact when needed.
Follow safety regulations and standards, use required safety equipment, observe safe work procedures, and promptly report workplace hazards, injuries, occupational illnesses, and property damage.
Support EEO principles and the prevention of sexual harassment.
Perform other duties as assigned.