Senior IT Specialist - Information Security (InfoSec)

Supreme Court of the United States•Washington, DC

13d•Onsite

About The Position

This full-time position is with the Office of Information Technology (OIT) at the Supreme Court of the United States in Washington, D.C. OIT provides automated information systems and access to those systems for the Court. The Senior IT Specialist (InfoSec) works under the guidance of senior staff and performs tasks involved in developing, coordinating, implementing, and maintaining standards, procedures, and technical solutions to protect the confidentiality, integrity, and availability of information systems and data. The InfoSec serves as the primary security advisor and accountable official for one or more Court information systems. The role ensures assigned systems maintain an acceptable level of risk and comply with Court information security policies and standards. It requires technical cybersecurity expertise and security governance acumen to turn complex policy requirements into practical protections across diverse Court technology environments. Continued employment is conditioned on acquiring and retaining a Top Secret clearance. The position is onsite in Washington, D.C., with a partial telework option after a probation period, at the hiring manager's discretion. Employment is subject to successful completion of a security background check.

Requirements

At least two years of experience as an Information Systems Security Officer or Security Control Assessor, plus at least two additional years of applicable Information Technology or Information Security experience.
A college degree in a computer-related field and two years of demonstrated cybersecurity-related experience, or five years of demonstrated cybersecurity experience.
Knowledge and experience implementing cybersecurity frameworks and concepts, such as the Risk Management Framework, DISA STIGs, CIS Benchmarks, ISO 27001, ATT&CK framework, and ISO/IEC 15026-2.
Knowledge of network protocols, including TCP/IP, common application protocols, and ports.
Experience with asset management and configuration management.
Experience protecting Personally Identifiable Information (PII).
Knowledge of IT security principles and methods, such as firewalls, demilitarized zones, and encryption.
Strong customer service skills.
Proficiency with Microsoft Excel and Word.
Excellent written and verbal communication skills and the ability to create, manage, and prioritize tasks.
Ability to work as a team player in a fast-paced, team-oriented office environment.
Ability to acquire and retain a Top Secret (TS) clearance as a condition of continued employment.
Successful completion of a security background check.
If a male applicant was born after December 31, 1959, certification of Selective Service registration or exemption is required.

Nice To Haves

Understanding of operating systems such as Windows and Linux/Unix, and command-line tools.
Certified Information Systems Security Professional (CISSP).
Certified Information Systems Auditor (CISA).
Certified Information Security Manager.
CompTIA Security+.
Certified Authorization Professional (CAP).
Information Technology Infrastructure Library (ITIL) v3.
Strong interpersonal communication skills and the ability to communicate and understand technical information, comprehend technical instructions, evaluate problems, and assist users.
Ability to remain calm and professional in high-stress situations, short timeframes, or urgent requests.

Responsibilities

Develop, coordinate, implement, and maintain standards, procedures, and technical solutions that protect the confidentiality, integrity, and availability of information systems and data.
Serve as the primary security advisor and accountable official for one or more Court information systems.
Ensure assigned systems maintain an acceptable level of risk and operate in compliance with Court information security policies and standards.
Develop, manage, and implement contingency plans.
Develop, implement, and maintain Information System ATO package artifacts, including System Security Plans (SSP), Security Assessment Reports (SAR), Plans of Action & Milestones (POA&M), Risk Assessment Reports (RAR), Configuration Management Plans, Contingency Plans, and Privacy Impact Assessments (PIA).
Configure, update, and troubleshoot cellular devices and peripherals.