Information Technology Specialist (Security)

Animal and Plant Health Inspection Service • Fort Collins, CO

5h

About The Position

The Information Technology Specialist (Security) serves as a Cyber Security Engineer within the Information Technology Division (ITD). ITD’s mission is to acquire and use IT resources to improve the quality, timeliness, and cost effectiveness of Animal and Plant Health Inspection Service (APHIS) and Agricultural Marketing Service (AMS) service delivery. The role administers a program that integrates cybersecurity throughout the IT solution development lifecycle (SDLC) and provides full life cycle vulnerability assessment for MRP-ITD IT systems.

Requirements

• One year of specialized experience equivalent to the GS-12 level, including evaluating technical solutions, processes, and architectural changes for secure design throughout the SDLC; conducting static and dynamic source code scanning and vulnerability remediation; communicating risks and remediation steps; and participating in cyber incident response and remediation.
• IT-related experience demonstrating attention to detail, customer service, oral communication, and problem solving competencies.
• U.S. Citizen or U.S. National.
• Individuals born male after December 31, 1959, must be registered with Selective Service or exempt.
• Successful adjudication of a background investigation and/or fingerprint check.
• Successful completion of a one-year probationary period unless previously served.
• Pass the E-Verify employment verification check.
• Enroll in Continuous Vetting.
• Federal employees must receive payments by direct deposit.

Responsibilities

• Apply federal and industry IT security guidelines, including OWASP, NIST, and SANS Institute guidance, to agency-wide cyber defense planning.
• Contribute to enterprise security services, including Web Application Firewall (WAF) and Enterprise Datamasking.
• Use operational and performance metrics to improve the effectiveness and efficiency of IT security engineering and architecture programs.
• Develop policies and procedures to ensure information systems are reliable and accessible and to prevent and defend against unauthorized access to systems, networks, and data.
• Participate in network and systems design to ensure appropriate security policies are implemented.
• Evaluate current and proposed technical solutions, processes, and architectural changes to ensure secure design and configuration principles are applied throughout the SDLC.
• Perform static and dynamic source code scanning reviews and code-level remediation of vulnerability findings in compliance with OWASP Top 10 standards and NIST guidelines.
• Communicate potential and confirmed risks and vulnerabilities to stakeholders and provide remediation steps.
• Participate in cyber incident response and remediation efforts related to application or network security incidents.

Benefits

• Federal employees and their families have access to a comprehensive benefits package; specific benefits depend on the position and are available from the hiring agency.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed