Information Technology Specialist (Information Security)

Summary

This position serves as a Cybersecurity Operations Specialist. This includes, but is not limited to, performing cyber incident response activities, leading internal security audits, providing security architecture reviews, performing cyber risk assessments for international travel and assisting with the creation of cybersecurity policy. This position is supervised by the Cyber Operations Branch Chief.

Duties

• •The duties may include, but are not limited to:
• •Oversees cybersecurity risk assessments for international travel requests to provide approval/disapproval for IT equipment to be taken on overseas travel to support the mission.
• •Collaborates with the International Services Division to maintain up-to-date requirements for international travel to ensure that current guidance aligns with mission needs.
• •Creates and updates cybersecurity policies to minimize gaps within those areas which leave the agency vulnerable and provides guidance to the Mission Area on cyber-related policy questions.
• •Optimizes the effectiveness and efficiency of the Cybersecurity Program based on internal and Department-mandated performance metrics.
• •Coordinates investigations across all Cyber branches, matures the incident response reporting capabilities, and provides status reports to Cyber leadership throughout all stages of each investigation.
• •Builds partnerships amongst other ITD Directorates and teams and fosters cross-functional teamwork to apply cybersecurity and privacy best practices.

Qualifications

Applicants must meet all qualifications and eligibility requirements by the closing date of the announcement, including specialized experience and/or education, as defined below. FOR THE GS-13 LEVEL: Applicants must have one year of specialized experience (equivalent to the GS-12 level) that may have been obtained in the private or public (local, county, state, Federal) sectors which demonstrates: Reviewing files for malicious content related to anomalous activity or industry ransomware attacks to validate the security of the data. Performing cyber and privacy incident response activities and coordinating investigations with agency Security Operations Center throughout each stage. Conducting cyber risk assessments related to foreign travel to make determinations on equipment approvals. Leading security awareness training and/or creating training material on various cyber threats to ensure increased cybersecurity posture. Note: There is no education substitution for this grade level. Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional, philanthropic, religious, spiritual, community, student, social). Volunteer work helps build critical competencies and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience.

Education

This position does not have an education qualification requirement.