IT Specialist (Infosec/Plcypln)

United States Fleet Forces Command • Fort Meade Naval Facilities, MD

7d • Onsite

About The Position

Serve as a GG-2210-13 IT Specialist (Information Security/Policy Planning) for U.S. Fleet Cyber Command in Fort Meade, Maryland. In the role of Security Control Assessor (SCA), conduct independent security assessments of information systems, applications, and networks to determine whether they comply with security requirements. Plan and coordinate assessments, review security documentation, assess vulnerabilities and security controls, and use cybersecurity principles and applicable governance to support risk management.

The position is designated as a DoD Cyber Workforce Framework work role 612, Security Control Assessor, at the Advanced proficiency level. The employee must maintain qualifications under DON Cyber Workforce Program requirements, complete at least 20 hours of documented cyber-related continuous learning annually, and obtain and maintain required credentials within 12 months of appointment. A Top Secret security clearance and access to Sensitive Compartmented Information are required and must be maintained. The position requires a periodic polygraph examination, may require a two-year DCIPS trial period, and may involve occasional travel.

Requirements

• One year of IT-related experience in the federal service or equivalent experience in the private or public sector demonstrating attention to detail, customer service, oral communication, and problem solving.
• At least one year of specialized experience equivalent to the GG/GS-12 grade level or pay band, performing duties such as security testing, risk identification and mitigation, assessment planning and reporting, control effectiveness reviews, or security risk management.
• Knowledge of penetration-testing principles, tools, and techniques, including specialized tools for non-traditional systems and networks such as control systems.
• U.S. citizenship and suitability for federal employment.
• Must obtain and maintain a Top Secret security clearance and access to Sensitive Compartmented Information (SCI).
• Successful completion of a pre-employment drug test and subject to random drug testing.
• Must accept appointment in the DCIPS excepted service, which does not confer competitive status.
• Must maintain qualifications under DON Cyber Workforce Program requirements, document at least 20 hours of cyber-related continuous learning annually, and obtain required credentials within 12 months of appointment.
• Must undergo periodic polygraph examinations.
• Males born after December 31, 1959, must be registered for Selective Service.
• Occasional travel may be required.

Responsibilities

• Conduct independent security assessments of information systems, applications, and networks to ensure compliance with security requirements.
• Plan and coordinate security assessment activities in accordance with established policies, procedures, and guidelines.
• Review security documentation in depth to identify potential gaps in security controls.
• Evaluate, implement, and disseminate IT security assessment, monitoring, detection, and remediation tools and procedures using standards-based concepts and capabilities.
• Conduct vulnerability scans and identify vulnerabilities in information systems and networks.
• Apply cybersecurity principles to manage risks related to the use, processing, storage, and transmission of information or data.
• Use relevant laws, policies, procedures, and governance related to critical infrastructure, Risk Management Framework requirements, and organizational evaluation and validation requirements.
• Conduct security testing, including vulnerability assessments, penetration testing, and security control validation in support of the Risk Management Framework.
• Work with system owners and security personnel to identify and document security risks and recommend mitigating controls.
• Develop and maintain security assessment plans and report assessment results to leadership and the Designated Authorizing Official.
• Assess security control effectiveness, review security architectures for gaps, and develop security risk management plans.
• Complete and document a minimum of 20 hours of cyber-workforce-related continuous learning annually and obtain and maintain required credentials.

Benefits

• Federal employee benefits package available to the employee and family; specific eligibility depends on position type.
• Recruitment incentives may be authorized for eligible new hires, subject to policy and funding availability.
• Relocation expense reimbursement may be offered by other hiring managers for similar positions, subject to funding and policy.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed