IT Cybersecurity Specialist (InfoSec)

Social Security Administration•Denver County, CO

3d•Hybrid

About The Position

The IT Cybersecurity Specialist supports the day-to-day functionality and protection of Social Security Administration information technology systems by developing and implementing cybersecurity programs, policies, procedures, and digital tools. This career-ladder position is developmental and leads to the GS-12 full performance level. Assignments build experience and technical competence in the methods, procedures, principles, and techniques needed at the full performance level. The supervisor sets objectives, priorities, and deadlines, provides consultation, and reviews completed work. Standard routine duties are expected to be performed independently; promotion is at management’s discretion and depends on higher-level work, the employee’s ability, and administrative and organizational requirements. The position is in the Chief of Security and Resiliency (SR) / Cybersecurity. It is a full-time, flex-time position that is not authorized for virtual work or outstationing. Telework may be approved once applicable conditions are met; authorized teleworkers must live within a two-hour commute of their assigned Official Duty Station. Relocation expenses will not be paid. Selectees must have or be able to obtain and maintain a Top Secret Security Clearance (TS-SCI).

Requirements

U.S. citizenship is required.
Male applicants born after December 31, 1959, must certify registration with the Selective Service System or exemption under the Selective Service Law.
Fingerprinting and a background and/or security investigation may be required; job offers are contingent on the results.
Must have or be able to obtain and maintain a Top Secret Security Clearance (TS-SCI).
Demonstrate the federal 2210 IT competencies: attention to detail, customer service, decision making, information management, interpersonal skills, oral communication, problem solving, teamwork, and technical competence.
For GS-09, meet the specialized experience requirement at the GS-07 level or equivalent, involving following established procedures to support planning, development, implementation, and/or maintenance of information security programs or policies. Experience should include participating in IT security policy and procedure development, risk assessments and disaster recovery or contingency planning, collecting and documenting security information and recommendations, and explaining technical security information to different audiences.
For GS-09, qualifying specialized experience may be replaced by a relevant master’s degree or at least two full academic years of progressively higher graduate-level education leading to a master’s degree. Relevant degrees must be in a technology field or include at least 24 semester hours in relevant areas.
For GS-11, meet the specialized experience requirement at the GS-09 level or equivalent, involving assisting with planning, development, implementation, and/or maintenance of information security programs or policies. Experience should include assisting with IT security policy and procedure development, risk assessments and disaster recovery or contingency planning, collecting and documenting security information and recommendations, and explaining technical security information to different audiences.
For GS-11, qualifying specialized experience may be replaced by a relevant Ph.D. or at least three full academic years of progressively higher graduate-level education leading to a Ph.D. Relevant degrees must be in a technology field or include at least 24 semester hours in relevant areas.
Minimum qualifications must be met by the closing date of the announcement.
Provide a resume that clearly describes relevant duties and responsibilities for each position held. Relevant paid or unpaid work and assignments or tasks completed as part of education or training may be credited.
If using education in lieu of specialized experience, submit transcripts containing the required identifying, program, and degree-conferment information; foreign education requires documentation of U.S. equivalency.
A Standard Form 86 may be required for the appropriate investigation.
Work performance and adherence to position conditions may be assessed during a one-year probationary period for applicable new appointees.

Responsibilities

Ensure the security and integrity of systems, networks, and data.
Test and deploy cybersecurity capabilities and software solutions, assessing their effectiveness in threat detection, incident response, data protection, and compliance.
Apply the Risk Management Framework (RMF) to identify, assess, and mitigate risks to the confidentiality, integrity, and availability of SSA data and systems.
Work with stakeholders to develop and implement risk mitigation strategies in accordance with federal standards.
Perform risk analysis, access management, security application development and testing, audit support, technology research, and implementation.
Consult with customers and stakeholders to evaluate functional requirements, translate them into technical solutions, and deliver actionable results supporting the agency’s cybersecurity mission.
Communicate the agency’s cybersecurity program, policies, and initiatives to internal and external stakeholders to promote awareness and understanding of security requirements and best practices.