Full-Time/Part-Time Full-Time
Description The
IT Security Operations Specialist - Level II provides operational cybersecurity support for the
Department of Homeland Security (DHS) Intelligence Enterprise (DHS IE) by performing day-to-day information security operations across multiple functional areas. This position supports Supply Chain Risk Management (SCRM), security incident management, privileged user administration, removable media control, equipment accountability, SCIF security operations, and Identity, Credential, and Access Management (ICAM) services, including
Intelligence Community Public Key Infrastructure (IC PKI) and
Homeland Secure Data Network (HSDN) token management.
Working closely with Information System Security Officers (ISSOs), Information System Security Managers (ISSMs), system administrators, security operations personnel, and Government stakeholders, the IT Security Operations Specialist ensures compliance with
DHS 4300C, Intelligence Community (IC) security policies, and Federal cybersecurity requirements while maintaining the operational security posture of DHS IE systems and facilities.
Key Responsibilities - Support daily IT security operations across the DHS Intelligence Enterprise, ensuring compliance with DHS, Intelligence Community, and Federal cybersecurity policies and operational procedures.
- Perform Supply Chain Risk Management (SCRM) activities, including:
- Pre-Procurement Device (PED) reviews
- Hardware risk assessments
- Equipment accountability reviews
- Supply chain security documentation
- Support IT security incident reporting, tracking, documentation, and escalation in accordance with DHS 4300C, NIST guidance, and Intelligence Community policies.
- Coordinate incident response activities and maintain incident records throughout the incident lifecycle.
- Maintain the enterprise Privileged User database and monitor privileged account compliance.
- Generate weekly, monthly, and quarterly privileged user reports, metrics, and compliance documentation.
- Administer removable media management activities, including:
- Media registration
- Accountability tracking
- Inventory management
- Compliance reporting
- Secure media handling procedures
- Perform equipment sanitization and decommissioning activities in accordance with DHS, NIST, and Intelligence Community media sanitization standards.
- Conduct equipment inspections and provide entry and exit control services for all hardware entering or leaving Sensitive Compartmented Information Facilities (SCIFs).
- Support the Data Access Cell (DAC) by administering user accounts, access permissions, and credential management services.
- Manage the complete lifecycle of IC PKI and HSDN tokens, including:
- Token issuance
- PIN resets
- Key recovery
- Token replacement
- Token reissuance
- Token revocation
- Perform face-to-face identity verification of IC PKI subscribers in accordance with Federal Identity, Credential, and Access Management (FICAM) and Intelligence Community requirements.
- Maintain accountability for IC PKI and HSDN tokens using the HSDN Token Tracking System (TTS).
- Prepare and submit monthly IC PKI, HSDN, DAC, and Token Tracking System (TTS) metrics and accountability reports.
- Perform quarterly token inventory audits and reconcile discrepancies.
- Participate in Intelligence Community PKI working groups as the DHS I&A representative and communicate policy updates to program stakeholders.
- Support Government data calls, audits, inspections, and cybersecurity compliance reviews.
- Maintain operational documentation, standard operating procedures (SOPs), and security records related to IT security operations.
Minimum Qualifications - Active Top Secret/Sensitive Compartmented Information (TS/SCI) security clearance.
- Minimum 3-5 years of experience supporting IT security operations, privileged access management, information assurance, cybersecurity operations, or systems administration within a classified Federal Government or Intelligence Community environment.
- Working knowledge of:
- NIST SP 800-53
- DHS Sensitive Systems Policy Directive 4300C
- Intelligence Community security operational requirements
- Federal Identity, Credential, and Access Management (FICAM) principles
- Experience supporting:
- Privileged user management
- Removable media control
- Security incident reporting
- Equipment inspections
- Hardware accountability
- SCIF operational security procedures
- Familiarity with Intelligence Community Public Key Infrastructure (IC PKI) and Homeland Secure Data Network (HSDN) token lifecycle management.
- Experience maintaining security documentation, operational metrics, and compliance reports.
- Current CompTIA Security+ certification or an equivalent DoD 8570/8140-approved cybersecurity certification.
- Bachelor's degree in Information Technology, Cybersecurity, Information Systems, Computer Science, or a related discipline. Equivalent professional experience may be substituted where permitted.
Preferred Qualifications - Current Certified Information Systems Security Professional (CISSP) or Certified Authorization Professional (CAP) certification.
- Experience supporting DHS Intelligence & Analysis (I&A) or other Intelligence Community cybersecurity programs.
- Experience using DHS Information Assurance (IA) IT Service Management (ITSM) tools for ticket and request management.
- Familiarity with Federal Identity, Credential, and Access Management (FICAM) and ICAM programs.
- Experience with Supply Chain Risk Management (SCRM) policies and Federal hardware security requirements.
- Knowledge of NIST SP 800-161 (Cyber Supply Chain Risk Management) and related Federal guidance.
- Experience supporting SCIF operations, COMSEC procedures, or secure facility access control.
Required CertificationsOne of the following current certifications is required:
- CompTIA Security+ (or equivalent DoD 8570/8140-approved certification)
Preferred certifications include: - Certified Information Systems Security Professional (CISSP)
- Certified Authorization Professional (CAP)
Clearance RequirementActive Top Secret/Sensitive Compartmented Information (TS/SCI) Clearance RequiredThis position is currently accepting applications. 
