IT Specialist (Infosec/Network) - Alternate Hiring Authority

Air Force Materiel Command•Robins AFB, GA

About The Position

The position serves as the Air Force Sensitive Compartmented Information (AFSCI) Site Information Systems Security Manager for the Air Force Life Cycle Management Center (AFLCMC), Intelligence Directorate. It manages, maintains, and assesses cybersecurity requirements for classified and unclassified information systems within AFLCMC SCI facilities at the installation. The role plans, develops, implements, and maintains the AFLCMC/IN Enterprise SCI Cyber Security program at the installation. It implements and manages the enterprise SCI Information System Assessment and Authorization (A&A) program under the Risk Management Framework (RMF), consistent with Intelligence Community Directive 503, NIST Special Publications, and other regulations and policies. The position advises on and implements cybersecurity policies and procedures protecting internal organizational systems, interfaces to Wide-Area Networks (WANs), and communications needed for simulation and analysis. It also provides Communication Security (COMSEC) cryptographic support and accountability for AFLCMC intelligence and SCI mission systems. This is a Defense Civilian Intelligence Personnel System (DCIPS) position in the Communications and Information Career Field. The position is designated special-sensitive and requires the ability to obtain and retain a TOP SECRET security clearance with SCI access, as well as signing a nondisclosure agreement. The employee must maintain current certifications, pass initial and periodic short-notice drug tests, and achieve resident qualifications for assigned DoD Cyber Workforce work roles at their specified proficiency levels within 12 months of assignment. The employee may be required to work evenings, weekends, or holidays. A two-year DCIPS trial period applies to new DCIPS employees; depending on the position type, a one-year probationary period or two-year trial period may also apply. The position is a DoD Cyber Workforce position in Oversight and Governance, Cybersecurity, and Securely Provision work roles. Recruitment or relocation incentives and advance-in-hire may be authorized. PCS may be paid if authorized, subject to applicable requirements. An advanced IT or Cybersecurity degree earned within the last five years is desirable.

Requirements

U.S. citizenship is required.
Must be able to obtain and retain a TOP SECRET security clearance with access to Sensitive Compartmented Information (SCI), and must sign a nondisclosure agreement.
Must maintain current certifications.
Must pass initial and periodic short-notice drug testing.
Must achieve resident qualification for assigned DoD Cyber Workforce roles at specified proficiency levels within 12 months of assignment.
Must demonstrate the listed competencies: attention to detail, customer service, decision making, information management, interpersonal skills, oral communication, problem solving, teamwork, and technical competence.
Experience demonstrating the knowledge, skills, abilities, and competencies needed for successful performance, including leading and managing an enterprise-level cybersecurity program; developing, directing, and enforcing network security architectures and policies; applying risk management processes; and/or using threat intelligence and vulnerability data to oversee penetration testing and develop mitigation strategies.
Knowledge of cybersecurity and risk management principles, network security architecture, and the ability to make strategic risk-based decisions and advise senior leadership on complex security matters.
Skill in creating, directing, and enforcing enterprise cybersecurity policies and strategies and managing protection of interconnected systems.
Knowledge of current and emerging cyber threats, attack vectors, and system vulnerabilities, and the ability to synthesize threat intelligence and technical data to assess risk and develop mitigation strategies.
Skill in planning and conducting technical audits, reviews, and security control assessments, and evaluating controls against RMF requirements and industry best practices.
Ability to analyze technical evidence for system compliance and trustworthiness, and prepare or review formal audit reports with actionable corrective recommendations.
Must be registered for Selective Service, if applicable.
Must use direct deposit as a federal employee.
Must serve the applicable one-year probationary period or two-year trial period, with continued employment subject to written certification that it advances the public interest.

Nice To Haves

An advanced Information Technology or Cybersecurity degree conferred within the last five years is desirable.
Experience in cybersecurity program leadership in SCI environments; expert-level RMF knowledge; successful system accreditations and management of A&A packages; experience with tools such as Xacta or eMASS; IT audits; COMSEC cryptographic equipment; and security policies aligned with DoD, Intelligence Community, and Air Force directives.
Certifications such as CISSP, CISM, or CISA are desirable.

Responsibilities

Plan, develop, implement, and maintain the AFLCMC/IN Enterprise SCI Cyber Security program at the installation.
Implement and manage the AFLCMC Enterprise SCI Information System Assessment and Authorization (A&A) program under the Risk Management Framework and applicable directives, standards, regulations, and policies.
Implement and advise on cybersecurity policies and procedures to protect internal organizational systems, WAN interfaces, and communications required for simulation and analysis execution.
Provide Communication Security (COMSEC) cryptographic support and accountability for AFLCMC intelligence and SCI mission systems.
Manage, maintain, and assess cybersecurity requirements for classified and unclassified information systems within AFLCMC SCI facilities at the installation.