IT CyberSecurity Specialist (Data Security)

MINIMUM QUALIFICATION REQUIREMENTS All applicants must meet the qualification requirements outlined below to be considered minimally qualified for this position. The qualification requirements are in accordance with the OPM Qualification Standards. ALL QUALIFICATIONS MUST BE MET BY THE CLOSING DATE OF THIS ANNOUNCEMENT.

BASIC REQUIREMENTS

Applicants must meet one of the following criteria listed below in order to meet the basic requirement for the IT CyberSecurity Specialist position, 2210. Attention to Detail - Is thorough when performing work and conscientious about attending to detail.

Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services.

Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately.

Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. -AND- SPECIALIZED EXPERIENCE: In addition to the Basic Requirements above, applicants must have a minimum of one year of specialized experience at a level of difficulty and responsibility comparable to the next lower grade or comparable pay band in the Federal service or equivalent experience in the private sector.

You may qualify at the GS-12 level, if you fulfill the following qualification requirement: One full year of specialized experience equivalent to the GS-11 grade level in the Federal service or equivalent experience in the private sector which demonstrates all of the following: 1) Implementing and maintaining technical system security controls, such as logging and monitoring, vulnerability scanning, configuration management, and access control; 2) Communicating threats, vulnerabilities, and risks to technical and non-technical stakeholders; 3) Performing continuous monitoring of information systems through review of open source vulnerability information, vulnerability scanning, and ongoing system assessments; 4) Performing system security assessments, including experience executing assessments as part of system authorization to operate processes; and 5) Maintaining compliance with internal policies and procedures and applicable laws, regulations, and standards in securing information systems.

Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience.

As an IT CyberSecurity Specialist (Data Security), GS-2210-12, your typical work assignments may include the following: Implement automated technical security controls across diverse information systems, including security incident and event management monitoring, vulnerability scanning, and access management.

Serve as an expert on the system authorization process, performing assessments and offering peer oversight to assessments performed by others to ensure accurate and comprehensive reviews of technical security controls. Identify risks to EOP systems and coordinate with technical stakeholders to implement risk mitigations. Provide communication to technical and non-technical stakeholders on findings from assessments and continuous monitoring activities to ensure organizational awareness of system security risks.

Identify and recommend enhancements to EOP security controls to address emerging vulnerabilities, threats, technological advancements, and emerging trends.