IT Cybersecurity Specialist (Infosec)

Defense Finance and Accounting Service•Indianapolis, IN

About The Position

The IT Cybersecurity Specialist conducts security evaluations, audits, assessments, and reviews of information systems to identify vulnerabilities, risks, and protection needs. The position assesses security threats, implements corrective actions, modifies systems to reduce vulnerabilities, and responds to incident reports by troubleshooting security threats and vulnerabilities. The specialist monitors compliance with IT security policies and procedures during information-systems development, participates in network and systems design to ensure appropriate security policies and procedures are applied, and evaluates and recommends new IT security methods. The role also applies knowledge of the Federal Information Systems Control Audit Manual (FISCAM) and assists application teams with FISCAM and audit compliance questions and requirements. The position is within the Department of Defense and is subject to background and security suitability requirements. Under DoD 8140, the incumbent must complete Foundational Qualifications within 9 months and Residential Qualification requirements within 12 months. The role is covered by the DFAS Career Acclimation Program, with promotion dependent on performance, successful training completion, and availability of higher-graded work. Telework availability depends on mission requirements and supervisory determination.

Requirements

U.S. citizenship.
A favorable background investigation and suitability determination; security clearance may be required, and security eligibility must be maintained.
Register for Selective Service if applicable.
Complete DoD 8140 Foundational Qualifications within 9 months and Residential Qualification requirements within 12 months.
Demonstrate IT-related experience in attention to detail, customer service, oral communication, and problem solving at the level described in the announcement.
For GS-07 entry: one year of specialized experience equivalent to GS-05, applying information assurance policy and procedures to automated information systems and assisting with information-systems security testing; qualifying education may substitute as described in the announcement.
For GS-09 entry: one year of specialized experience equivalent to GS-07, assisting with information-security policy and procedure development, implementing technical information-assurance and security controls, and performing systems-security testing; qualifying graduate education may substitute as described in the announcement.
For GS-11 entry: one year of specialized experience equivalent to GS-09, conducting security evaluations, audits, and reviews; developing security specifications, technical controls, and testing plans; and reviewing audit results and implementing recommendations; qualifying doctoral-level education or graduate study may substitute as described in the announcement.
Submit transcripts if substituting education for experience.

Responsibilities

Conduct information systems security evaluations, audits, assessments, and reviews to identify vulnerabilities, risks, and protection needs.
Assess security threats and implement corrective actions.
Modify systems to minimize vulnerabilities.
Troubleshoot security threats and vulnerabilities in response to incident reports.
Monitor and evaluate compliance with IT security policies and procedures during information-systems development.
Assist application teams with FISCAM and audit compliance questions and requirements.
Participate in network and systems design to ensure appropriate security policies and procedures are implemented.
Evaluate and recommend new IT security methods to enhance capabilities.