IT Cybersecurity Specialist (INFOSEC) - Arlington, VA

Military Spouse Corporate Career Network•Arlington, VA

2d•Onsite

About The Position

This position is located in the Cybersecurity and Infrastructure Security Agency (CISA), Infrastructure Security Division (ISD). CISA is the Nation’s risk advisor, working with partners across government and industry to defend against today’s threats and build more secure and resilient infrastructure. The incumbent serves as an IT Cybersecurity Specialist (INFOSEC) supporting national cybersecurity exercise programs. The position contributes to CISA’s efforts to build national capacity and capabilities to enhance the security and resilience of critical infrastructure through the planning, design, development, conduct, and evaluation of cybersecurity exercises. The position requires advanced cybersecurity knowledge, experience applying Homeland Security Exercise and Evaluation Program (HSEEP) principles, and the ability to work with federal, state, local, tribal, territorial, private sector, and international partners.

Requirements

Cybersecurity exercise planning, design, conduct, facilitation, or evaluation.
HSEEP principles and exercise methodology.
Cybersecurity or critical infrastructure risk and resilience.
Stakeholder coordination across government and private sector partners.
Development of after-action reports, briefings, decision papers, or technical materials.
Ability to present technical cybersecurity information to non-technical audiences.
Experience leading or coordinating multidisciplinary teams or working groups.
Experience identifying gaps and recommending process, policy, or program improvements.
Must be able to attain/maintain a Top Secret / Sensitive Compartmented Information clearance.

Responsibilities

Design, develop, and conduct cybersecurity exercises in accordance with the Homeland Security Exercise and Evaluation Program (HSEEP).
Plan and execute discussion-based and operations-based exercises, including seminars, workshops, games, drills, tabletop exercises, functional exercises, and full-scale exercises.
Lead diverse, multidisciplinary intra-agency and interagency groups to design, develop, deliver, and evaluate cybersecurity exercises.
Provide subject-matter expertise to guide exercise design and delivery, including control, facilitation, and evaluation of exercises.
Develop and maintain exercise support products and services, including CISA Tabletop Exercise Packages and related cybersecurity exercise tools.
Develop cybersecurity scenarios based on current and emerging technology, adversary tactics, techniques, and procedures, and stakeholder exercise objectives.
Conduct interactive training and exercise events to create effective learning environments for technical and non-technical audiences.
Collaborate with critical infrastructure owners and operators, IT security experts, emergency management officials, and government partners to support cybersecurity objectives.
Raise awareness and improve coordination with federal, SLTT, private sector, and international partners on gaps in cyber management practices and recommended process improvements.
Promote collaborative efforts to reduce risk and threats to critical information, enterprise, communications, and control systems.
Build and support regional and local cybersecurity partnerships, coalitions, and information-sharing efforts.
Promote awareness of cyber policy, strategy, and CISA cybersecurity capabilities among government and private sector partners.
Assess stakeholder needs, conduct gap analyses, and assist in defining requirements for cybersecurity exercise programs and products.
Publish after-action reviews and present technical findings, observations, and recommendations to technical and non-technical audiences.
Communicate key exercise findings to senior leadership.
Prepare decision papers, reports, analyses, memos, speeches, talking points, briefings, and correspondence for senior federal, departmental, and agency leadership.
Respond to inquiries and requests for information from higher headquarters, other federal agencies, Congress, the media, state and local governments, and the private sector, coordinating responses as appropriate.
Serve as a technical advisor on program effectiveness, efficiency, policy, direction, and cybersecurity exercise implementation.
Resolve complex issues involving organizations and stakeholders with differing or competing interests.