You will serve as a GG-2210-13 IT SPECIALIST (INFOSEC/PLCYPLN) for US FLEET CYBER COMMAND in Ft Meade, MD. As a Security Control Assessor (SCA), you will conduct independent security assessments of information systems, applications, and/or networks to ensure compliance with security requirements.
Duties- You will conduct independent security assessments of information systems, applications, and/or networks to ensure they are compliant with security requirements.
- You will plan and coordinate security assessment activities in accordance with established policies, procedures, and guidelines.
- You will conduct in-depth reviews of security documentation to identify potential gaps in security controls.
- You will evaluate, implement, and disseminate information technology security assessment, monitoring, detection, and remediation tools and procedures utilizing standards-based concepts and capabilities.
- You will conduct vulnerability scans and recognize vulnerabilities in information systems and networks.
- You will use knowledge of cybersecurity principles used to manage risks related to the use, processing, storage, and transmission of information or data.
- You will utilize relevant laws, policies, procedures, or governance related to critical infrastructure, Risk Management Framework (RMF) requirements and the organization's evaluation and validation requirements.
RequirementsConditions of employment- Must be a US Citizen.
- Must be determined suitable for federal employment.
- Must participate in the direct deposit pay program.
- You must obtain and maintain a Top Secret security clearance and access to Sensitive Compartmented Information (SCI). Failure to do so may result in the withdrawal of an offer or removal. Indicate the level and date of your clearance in your resume.
- You must acknowledge in writing that you are accepting an appointment in the DCIPS (excepted service) which does not confer competitive status, prior to appointment.
- Within the Department of Defense (DoD), the appointment of retired military members within 180 days immediately following retirement date to a civilian position is subject to the provisions of 5 United States Code 3326.
- Males born after 12-31-59 must be registered for Selective Service.
- This position requires a periodic polygraph examination.
- This position may require a 2-year DCIPS trial period.
- Occasional travel may be required.
- This position is designated as a Cyber Workforce position in the DoD Cyber Workforce Framework (DCWF) primary work role of 612 proficiency level Advanced.
- (Cont) As a condition of employment, the incumbent of the position is required to maintain qualifications in accordance with DON Cyber Workforce Program requirements of SECNAV M-5239.2.
- (Cont.) This designation requires the incumbent to participate in a continuous learning (CL) program as described in SECNAVINST 5239.20A and SECNAV M-5239.2.
- (Cont.) An annual 20 hour minimum of Cyber Workforce related continuous learning must be documented in a current individual development plan signed by both the employee and supervisor.
- (Cont.) This designation requires the incumbent to obtain the required credentials within 12 months of appointment and maintain credentials as described in SECNAV M-5239.2 for DCWF role of Security Control Assessor proficiency level (Advanced).
- (Cont.) For more information, review SECNAV M-5239.2 Chapter 3, paragraph b (1) (g) 1. Failure to meet a condition of employment may result in disciplinary and/or adverse action up to removal from Federal service.
QualificationsThis position requires one year of information technology related experience in the federal service or private or public sector demonstrating the following four competencies, as defined:
1. Attention to Detail - Is thorough when performing work and conscientious about attending to detail.
2. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services.
3. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately.
4. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations.
In addition to experience demonstrating the four competencies above, your resume must demonstrate at least one year of specialized experience equivalent to the next lower grade level (GG/GS-12) or pay band in the federal service or equivalent experience in the private or public sector performing duties such as:
- Conduct security testing to include vulnerability assessments, penetration testing, and security control validation in support of the Risk Management Framework.
- Work with system owners and security personnel to identify and document security risks and recommend security controls to mitigate those risks.
- Develop and maintain security assessment plans and report the results of assessments to leadership and the Designated Authorizing Official (DAO).
- Assess the effectiveness of security controls, perform security reviews to identify gaps in the security architecture, and develop a security risk management plan.
- Use cybersecurity principles to manage risks related to the use, processing, storage, and transmission of information or data.
- Knowledge of penetration testing principles, tools, and techniques, including specialized tools for non-traditional systems and networks (e.g., control systems).
Additional qualification information can be found from the following Office of Personnel Management website:
https://www.opm.gov/policy-data-oversight/classification-qualifications/general-schedule-qualification-standards/#url=List-by-Occupational-Series
https://www.opm.gov/policy-data-oversight/classification-qualifications/classifying-general-schedule-positions/standards/2200/gs2200a.pdfhttps://www.opm.gov/policy-data-oversight/classification-qualifications/general-schedule-qualification-standards/2200/information-technology-it-management-series-2210-alternative-a/
Additional qualification information can be found from the following DON DCIPS policy website: https://www.secnav.navy.mil/doni/Naval%20Intelligence%20Activity/Chapter%205%20-%20Employment%20and%20Placement.pdf
EducationN/AAdditional informationThis position is covered by the Department of Defense Priority Placement Program.
Additional vacancies may be filled by this announcement.
A tentative offer of employment will be rescinded if the selectee fails to meet the pre-employment requirements, including failure to report to any of the scheduled appointments.
Federal annuitant information: The selection of an annuitant is subject to the Department of Defense and Department of the Navy policy on the employment of annuitants. Policy information may be found at: http://www.secnav.navy.mil/donhr/Documents/CivilianJobs/FedCivAnnuitants.pdf
During the application process you will have the ability to opt-in to make your resume available to hiring managers in the agency who have similar positions in the local commuting area. Depending on the hiring organization and the position being filled, job requirements (e.g., security clearance, travel, drug testing, financial disclosure filing, bargaining unit status, etc.) may vary. Other hiring managers filling similar positions may offer relocation expense reimbursement and/or may offer recruitment incentives for new employees, depending on funding availability and in accordance with policy. If you opt-in and are referred on a certificate, your resume will be available to other hiring managers for 180-days from the date the job announcement closes. Opting in does not impact your application for this announcement, nor does it guarantee further consideration for additional positions.
ICTAP does not apply to Excepted Service positions.
All Defense Intelligence positions under the Defense Civilian Intelligence Personnel System (DCIPS) are in the excepted service by specific statue, 10 U.S.C. 1601. This position is in the excepted service and does not confer competitive status.
Recruitment incentives may be authorized to eligible new hires.BenefitsA career with the U.S. government provides employees with a comprehensive benefits package. As a federal employee, you and your family will have access to a range of benefits that are designed to make your federal career very rewarding. Opens in a new windowLearn more about federal benefits.
Review our benefits
Eligibility for benefits depends on the type of position you hold and whether your position is full-time, part-time or intermittent. Contact the hiring agency for more information on the specific benefits offered.
