Information Technology Specialist (Information Security)

Six years of progressively technical experience with information security, preferably with Cisco, Microsoft and UNIX based systems, client/server applications and network engineering with a minimum of three years of hands-on experience securing enterprise environments. Applicable education may be substituted for years of experience.

Industry certifications such as Microsoft server and workstation (MCSE), Red Hat Certified Engineer (RHCE), ISACA CISA, Security+, CySA+, CCNA, CEH, CISSP, or Security X (CASP) are highly preferred. As an authorized and privileged user of Department of Defense Information Systems must possess or receive Information Assurance awareness by completing the Security + Certification as a condition of access within six months of employment and thereafter must complete annual Information Assurance awareness training.

Must know concepts and principles used with routers, switches, firewalls, security hierarchy, and the application of encryption key infrastructures and authentication processes. Ability to relate business requirements, and risks to technology implementation for network security. Strong analytical and problem-solving skills and a very strong ability to communicate both orally and in writing.

Must successfully complete a security clearance to travel and/or complete assigned duties that require access to classified national security information. This position had been determined as Non-critical Sensitive. As a condition of employment, the incumbent must be able to obtain and maintain an Access National Agency Check and Inquiries (ANACI/ Tier 3) Secret Clearance to access classified information.

Ensures confidentiality, integrity and availability of systems, networks and data through coordinated planning, analysis, development, implementation, maintenance and enhancements of information systems security programs, policies, procedures and tools. Performs analysis to identify network security risks and recommends appropriate data security procedures and products.

Monitors network and applications security and implements network security standards, procedures, and guidelines for multiple platforms and diverse system environments. Reviews development, testing, and implementation of network security plans, products, and control techniques. Directs, coordinates and facilitates information security activities. Coordinates activities to assure compliance with policies, regulations, completion of deadlines, proper execution of functions and efficiency of operations.

• Provides technical advice and guidance on unusual, controversial or complex problems.
• Analyzes processes, procedures, effectiveness and economy of services to recommend improvements.
• Monitors network and applications security and implements network security standards, procedures, and guidelines for multiple platforms and diverse system environments.
• Reviews development, testing, and implementation of network security plans, products, and control techniques.

Participates in long- and short-term planning and provides technical advice on interrelationships between functions, operations, programs that may affect cost and resources and improve coordination between activities. Monitors and reviews operation logs and event console activity to identify potential security related events. Investigates and recommends appropriate corrective actions for data security incidents. Installs and configures firewalls and network monitoring tools and applications.

Installs and configures tools, to allow automated monitoring of network logs and events. Develops and maintains effective network disaster plans, processes, and procedures. Consults with IT technical staff to install and configure hardware and software systems that provide appropriate network security. Documents network security policies. Conducts risk and vulnerability assessments to identify risks and protection needs in a WAN, LAN and WLAN environment.

Maintains an awareness of Marine Corps and Department of Defense, and other policies and regulations as appropriate pertaining to information security. Identifies regulatory changes that will affect information security policy, standards, and procedures. Develops system security evaluations, and contingency plans to recover digital information. Gathers evidence to be used to prosecute for computer crimes, and/or reprimand for abuse of computer technology. Performs other duties as assigned.

Identifies and reports security scans, vulnerabilities and remediation efforts to the Marine Corps Cyber Operations Group. Serves on the Incident Response Team which requires coordination with USMC and requires access to classified information. Provides World Class Customer Service with an emphasis on courtesy. Assists customers and communicates positively in a friendly manner. Asks questions to determine, verify and solve problems. Checks for satisfaction with the quality of goods and services.

Takes action to solve problems quickly. Alerts the higher-level supervisor or proper point of contact for help when problems arise. Adheres to safety regulations and standards. Uses any required safety equipment and observes safe work procedures.

Promptly reports any observed workplace hazards, and any injury, occupational illness, and/or property damage resulting from workplace mishaps to the immediate supervisor Adheres to established standards of actively supporting the principles of the EEO program and prevention of sexual harassment. This is a mixed position where the incumbent must be able to lift and carry objects up to 45 lbs. independently and objects over 45 lbs. with assistance.