IT Cybersecurity Specialist (Custspt/Infosec)

Defense Finance and Accounting Service•Indianapolis, IN

14h

About The Position

The Defense Finance and Accounting Service (DFAS) is hiring an IT Cybersecurity Specialist to support its mission of leading the Department of Defense in finance and accounting by delivering efficient, high-quality pay and financial information. The specialist serves as a senior Security Control Assessor, leading assessments of information systems and evaluating the effectiveness of security controls. The position plans and executes detailed assessments of management, operational, and technical controls under the Risk Management Framework (RMF), NIST 800-53, and DoDI 8510.01. It includes hands-on technical testing of networks, web applications, databases, and cloud environments; identifying vulnerabilities; analyzing residual risk and control effectiveness; and preparing assessment reports, risk documentation, and authorization packages. The specialist advises leadership, Authorizing Officials, and other stakeholders on system risk, and serves as a technical authority and mentor to junior assessors and IT staff. The position requires U.S. citizenship, a background investigation, and a favorable suitability and security determination. Access to classified information may be required, with a Secret clearance or higher depending on the position. DoD 8140 foundational qualifications must be completed within nine months and residential qualification requirements within 12 months. The position may be permanent or term, with a full-time or part-time schedule; work schedule is determined by the position. Telework depends on mission requirements and supervisory determination. Travel is seldom, and moving expenses will be paid. Pay varies by geographic location.

Requirements

U.S. citizenship.
Background investigation and suitability for federal employment.
Registration for Selective Service, if applicable.
Complete DoD 8140 Foundational Qualifications within nine months and Residential Qualification requirements within 12 months.
Obtain and maintain a favorable security determination; a Secret clearance or higher may be required depending on the position.
Meet IT competencies in attention to detail, customer service, oral communication, and problem solving.
For GS-13 entry, one year of specialized experience equivalent to GS-12 in the federal service, including conducting independent technical security control assessments using RMF, CSF, or ISO 27001; using Nessus, Fortify, and Burp Suite; preparing reports; and providing technical guidance.
Hands-on experience in development, networking, databases, or system administration.

Nice To Haves

CISM, CISA, or CISSP certification.

Responsibilities

Lead assessments of information systems as a senior Security Control Assessor.
Plan, develop, and execute detailed assessments of management, operational, and technical security controls under RMF, NIST 800-53, and DoDI 8510.01.
Conduct hands-on technical testing across networks, web applications, databases, and cloud environments.
Identify weaknesses and vulnerabilities in complex IT environments using security assessment tools.
Analyze assessment results to determine residual risk and security control effectiveness.
Prepare comprehensive assessment reports, risk documentation, and authorization packages.
Provide technically sound recommendations to leadership, Security Control Assessors, Authorizing Officials, and senior leaders on system risk posture.
Serve as technical authority and mentor to junior assessors and IT staff.
Provide expert guidance on secure system configuration, RMF processes, security tool usage, and mitigation strategies for complex enterprise systems.