IT CyberSecurity Specialist (Data Security)

Office of Administration•Washington, DC

24d

About The Position

The incumbent serves as OAIT's Senior Data Security Analyst, responsible for securing information systems by implementing and assessing risk-based cybersecurity controls. The work must comply with Executive Office of the President requirements, federal regulations, industry best practices, and requirements established by organizational entities. The specialist implements automated technical security controls across diverse information systems, including security incident and event management monitoring, vulnerability scanning, and access management. The role provides expertise in system authorization, conducts assessments, and offers peer oversight to help ensure thorough and accurate reviews of technical security controls. The specialist identifies risks to EOP systems and coordinates with technical stakeholders on mitigations, communicates assessment and continuous-monitoring findings to technical and non-technical stakeholders, and recommends control enhancements in response to vulnerabilities, threats, technological advances, and emerging trends. This is a GS-2210-12 position. Applicants must meet the stated basic requirements and have one year of specialized experience equivalent to the GS-11 level. The position has no education requirement. It is a Drug Testing Designated Position, requires obtaining and maintaining an interim and/or final security clearance, and may require successful completion of a one-year probationary period. Relocation expenses will not be paid.

Requirements

Meet the basic IT CyberSecurity Specialist requirements for attention to detail, customer service, oral communication, and problem solving.
Have at least one year of specialized experience equivalent to the GS-11 grade level in federal service or equivalent private-sector experience.
Experience implementing and maintaining technical system security controls, such as logging and monitoring, vulnerability scanning, configuration management, and access control.
Experience communicating threats, vulnerabilities, and risks to technical and non-technical stakeholders.
Experience conducting continuous monitoring of information systems, including reviewing open-source vulnerability information, performing vulnerability scans, and conducting ongoing system assessments.
Experience performing system security assessments, including assessments as part of system authorization-to-operate processes.
Experience maintaining compliance with internal policies and procedures and applicable laws, regulations, and standards for information system security.
Must be a U.S. citizen or national.
Must meet Selective Service registration requirements if male and born after December 31, 1959.
Must undergo pre-employment and random drug testing and participate in the direct deposit pay program.
New Executive Office of the President employees must successfully pass E-Verify employment verification.
Must obtain and maintain an interim and/or final security clearance before entering on duty; failure to obtain or maintain the required clearance may result in withdrawal of an offer or removal.
Must be determined suitable for federal employment.
Must successfully complete a one-year probationary period if required.

Responsibilities

Implement automated technical security controls across diverse information systems, including security incident and event management monitoring, vulnerability scanning, and access management.
Serve as an expert on the system authorization process; conduct assessments and provide peer oversight of assessments performed by others.
Identify risks to EOP systems and coordinate with technical stakeholders to implement risk mitigations.
Communicate findings from assessments and continuous monitoring activities to technical and non-technical stakeholders.
Identify and recommend enhancements to EOP security controls to address emerging vulnerabilities, threats, technological advancements, and trends.