IT SPECIALIST (INFOSEC)

This is a public notice flyer to notify interested applicants of anticipated vacancies. Applications will not be accepted through this flyer. Interested applicants must follow the directions in the "How to Apply" section of this flyer to be considered. There may or may not be actual vacancies filled from this flyer. Notice of Result letters will not be sent to applicants who respond to this flyer. Major duties: You will develop and/or aid with policy and procedure development to ensure information systems reliability and accessibility in order to prevent and defend against unauthorized access to systems, networks, and data. You will plan for conducting systems security evaluations, audits, and reviews. You will develop systems security contingency plans and disaster recovery procedures. You will ensure rigorous application of cybersecurity policies, principles, and practices in the delivery of all IT services. You will facilitate the gathering, analysis, and preservation of evidence in the prosecution of computer crimes as required. Qualifications: Your resume must also demonstrate at least one year of specialized experience at or equivalent to the GS-11 grade level or pay band (NH-02) in the Federal service or equivalent experience in the private or public sector. Specialized experience must demonstrate the following: 1. Expert knowledge of and demonstrated experience in applying Information Technology principles and practices. 2. Ability to work on a diverse team engaged in Defense Acquisition program management activities. 3. Knowledge of cybersecurity principles. 4. Expert Knowledge of the Risk Management Framework (RMF) process, Department of Defense Instruction (DoDi) 8510.01 series and the DoDi 8500.02 series. 5. Knowledge of computer networking concepts and protocols, and network security methodologies. 6. Knowledge of system life cycle management principles, including software security and usability. 7. Knowledge of information security program management and project management principles and techniques. 8. Knowledge of Information Technology (IT) supply chain security and risk management policies, requirements, and procedures. 9. Knowledge of network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth). 10. Skill in creating policies that reflect system security objectives. 11. Knowledge of risk management processes (e.g., methods for assessing and mitigating risk). 12. Knowledge of known vulnerabilities from alerts, advisories, errata, and bulletins. 13. Knowledge of cybersecurity principles. 14. Knowledge of cloud computing service models Software as a Service (SaaS), Infrastructure as a Service (laaS), and Platform as a Service (PaaS). 15. Knowledge of cloud computing deployment models in private, public, and hybrid environment and the difference between on-premises and off-premises environments. Additional qualification information can be found from the following Office of Personnel Management website: https://www.opm.gov/policy-data-oversight/classification-qualifications/competency-based-policy/general-schedule/2200/2210-competency-based-policy/competency-based-qualification-standard/ Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., professional, philanthropic, religious, spiritual, community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment.