IT SPECIALIST (INFOSEC/NETWORK)

Summary

Click on "Learn more about this agency" button below for IMPORTANT additional information. The primary purpose of this position is to Serves as Air Force (AF) Sensitive Compartmented Information (AFSCI) Site Information Systems Security Manager for the Air Force Life Cycle Management Center (AFLCMC), Intelligence Directorate. Manages, maintains, and assesses cybersecurity requirements for all classified/unclassified information systems within AFLCMC SCI facilities managed at the installation.

Duties

- Plans, develops, implements, and maintains the AFLCMC/IN Enterprise Sensitive Compartmented Information (SCI) Cyber Security program at the installation. - Implements and manages the AFLCMC Enterprise SCI Information System A&A Program at the installation pursuant to the Risk Management Framework (RMF) per Intelligence Community Directive (ICD) 503, National Institute of Standards and Technology (NIST) Special Publications, and other regulations and policies. - Implements and advises on cybersecurity policies and procedures to ensure protection of internal organizational, organization interfaces to Wide-Area Networks (WANs), and other communication modes required for simulation and analysis execution. -Provides Communication Security (COMSEC) Cryptographic support and accountability for AFLCMC intelligence and SCI mission systems at the installation.

Qualifications

In order to qualify, you must meet the quality experience requirements described in the Office of Personnel Management (OPM) Competency-Based Qualification Standards, Information Technology Management Series, 2210. BASIC REQUIREMENT OR INDIVIDUAL OCCUPATIONAL REQUIREMENT: For all positions individuals must have experience demonstrating each of the following competencies listed below: - Attention to Detail, Customer Service, Decision Making, Information Management, Interpersonal Skills, Oral Communication, Problem Solving, Teamwork and Technical Competence. In addition to meeting the basic requirement above, to qualify for this position you must also meet the qualification requirements listed below: EXPERIENCE REQUIRED: Your resume must reflect the quality level of experience which demonstrates the possession of the knowledge, skills, abilities, and competencies necessary for successful job performance required for this position. Examples of creditable experience include: Leading and managing a comprehensive enterprise-level cybersecurity program; developing, directing, and enforcing network security architectures and policies to ensure the confidentiality, integrity, and availability of interconnected systems; applying risk management processes to assess program-level risk; and/or synthesizing threat intelligence and vulnerability data to oversee penetration testing and develop proactive mitigation strategies against emerging cyber threats. KNOWLEDGE, SKILLS AND ABILITIES (KSAs): Your qualifications will be evaluated on the basis of your level of knowledge, skills, abilities and/or competencies in the following areas: 1. In-depth knowledge of Cybersecurity and Risk Management Principles: Knowledge of cybersecurity principles, risk management processes, and network security architecture. Ability to serve as the organization's authoritative source on security matters, applying this knowledge to make strategic, risk-based decisions and provide guidance to senior leadership on complex issues affecting national security systems. 2. Skill in Enterprise Security Program Leadership: Skill in creating, directing, and enforcing enterprise-level cybersecurity policies and strategies. Ability to lead and manage a comprehensive security program, discerning the protection needs of interconnected systems and ensuring the confidentiality, integrity, and availability of information across the enterprise. 3. Knowledge of the Threat Environment and System Vulnerabilities: In-depth knowledge of current and emerging cyber threats, attack vectors, and system vulnerabilities. Ability to synthesize threat intelligence and technical data to conduct penetration tests, assess program-level risk, and develop proactive mitigation strategies for an enterprise environment. 4. Skill in Conducting IT Audits and Security Control Assessments: Skill in independent planning and conducting technical audits, reviews, and security control assessments of information systems. Ability to analyze system performance indicators and evaluate the effectiveness of implemented controls against Risk Management Framework (RMF) requirements and industry best practices. 5. Ability to Analyze Evidence and Report Findings: Ability to collect, analyze, and evaluate technical evidence to determine system compliance and trustworthiness. Skill in preparing and reviewing formal audit reports, ensuring findings are accurate, well-documented, and contain actionable recommendations for corrective action. Ideal Candidate Statement: The ideal candidate is a current Information Systems Security Manager (ISSM) with mastery-level knowledge of cybersecurity principles and extensive experience leading an enterprise-level Sensitive Compartmented Information (SCI) program. They serve as the authoritative source on risk management, providing strategic guidance to senior leadership on complex security matters and developing organizational policies to ensure compliance with ICD 503, NIST, and DoD directives. This candidate has advanced skills in the full Assessment & Authorization (A&A) lifecycle using tools like Xacta and holds a senior-level certification such as CISSP or CISM. They are a self-directed leader, capable of managing programs, budgets, and stakeholder communications to protect critical national security systems. Drug Testing: This position has been designated by the Air Force as a Testing Designated Position (TDP) under the Air Force Civilian Testing Program. Employee must pass initial and periodic short notice drug testing. Illegal drug use by employees in sensitive positions presents a clear threat to the mission of the Air Force, National Security, and public safety. DoD Cyber Workforce (DCWF) Qualification: This position is designated as a DoD Cyber Workforce position in the 'Oversight and Governance (OV)' and 'Cybersecurity (CS)' categories (WRCs 722, 805) under the 'Cybersecurity' workforce element and 'Securely Provision' category (WRC 801) under the Cyber Enabler workforce element. Per DoD Manual 8140.03, "DoD Cyber Workforce Qualification and Management Program," qualification for these assigned work roles is a condition of employment. The employee must achieve resident qualification for all assigned DCWF work roles at their specified proficiency levels (Advanced, Intermediate, Basic) within 12 months of assignment. PART-TIME OR UNPAID EXPERIENCE: Credit will be given for appropriate unpaid and or part-time work. You must clearly identify the duties and responsibilities in each position held and the total number of hours per week. VOLUNTEER WORK EXPERIENCE: Refers to paid and unpaid experience, including volunteer work done through National Service Programs (i.e., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community; student and social). Volunteer work helps build critical competencies, knowledge and skills that can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience.