Information Technology Specialist (Infosec)

Defense Counterintelligence and Security Agency•Huntsville, AL

About The Position

The Defense Counterintelligence and Security Agency’s Industrial Security Field is seeking an Information Systems Security Professional (ISSP) to oversee complex information assurance and cybersecurity activities at cleared contractor sites across the country. The ISSP uses technical knowledge and interpersonal skills to help information systems security managers understand and implement the technical controls and processes required to protect classified information. The position conducts cybersecurity activities, including security control assessments and authorization work under the Risk Management Framework (RMF), and exercises oversight of cleared contractor information systems within the National Industrial Security Program (NISP). The ISSP evaluates security plans and controls, documents assessments, advises stakeholders, and makes authorization risk recommendations to the Authorizing Official. The role also engages with industry security professionals, recommends system and network configurations, and communicates NISP and RMF guidance and cybersecurity information. This is a full-time, flexible-tour, exempt position in the DCIPS Excepted Service. Overtime may be occasional. Situational telework may be approved temporarily on a case-by-case basis. Permanent Change of Station is not authorized. The position requires U.S. citizenship, an appropriate security clearance, and the ability to operate a passenger-type motor vehicle. The incumbent must obtain and maintain DoD 8570.01-M certifications for IAM Level III and IAT Level II within six months of appointment, unless already certified. Applicants must have specialized experience equivalent in difficulty, responsibility, and complexity to the next lower GS/GG-12 grade, generally one year or more. Education cannot substitute for specialized experience at this grade level. Selected applicants may be required to serve a two-year trial period. The position is subject to initial and random drug testing.

Requirements

U.S. citizenship.
Males born after December 31, 1959, must be registered for Selective Service.
Must obtain and maintain the appropriate security clearance required by the announcement.
Must obtain DoD 8570.01-M certification at IAM Level III and IAT Level II within six months of appointment, if not already certified.
Must possess the legal and personal qualifications to operate a passenger-type motor vehicle.
Specialized experience equivalent to the next lower GS/GG-12 grade, generally one year or more, applying cybersecurity and advanced information technology concepts, principles, and practices to difficult and complex work assignments.
Experience identifying, documenting, and communicating security-plan vulnerabilities.
Experience applying risk-management principles to perform risk analysis.
Experience evaluating and applying information assurance regulations, policies, and procedures to analyze operating or developmental computer systems and identify deficiencies in safeguarding classified data and information.
Demonstrated competencies in cybersecurity, risk management, problem solving, and written and oral communication.
Education may not be substituted for specialized experience at this grade level.
Subject to initial drug screening and random drug testing thereafter.

Responsibilities

Serve as an Information Systems Security Professional within the assigned region.
Perform cybersecurity activities, including security control assessments and assess-and-authorize activity using the Risk Management Framework.
Exercise security oversight of cleared contractor information systems within the National Industrial Security Program.
Analyze, assess, evaluate, verify, and validate cleared contractor information system security plans and security controls, and make authorization risk recommendations to the Authorizing Official.
Document security assessments and advise or assist stakeholders regarding assigned information systems.
Engage and interface with industry security professionals to assess implemented security controls.
Evaluate security control requirements, recommend configurations for information systems and networks, and identify risk-management strategies through vulnerability mitigation.
Represent the agency at meetings to convey NISP and RMF implementation guidance and cybersecurity information related to industrial security.