IT Cybersecurity Specialist (INFOSEC) - ALTERNATE HIRING AUTHORITY

In order to qualify, you must meet the quality experience requirements described in the Office of Personnel Management (OPM) Competency-Based Qualification Standards, Information Technology Management Series, 2210.

BASIC REQUIREMENT OR INDIVIDUAL OCCUPATIONAL REQUIREMENT: For all positions individuals must have experience demonstrating each of the following competencies listed below:- Attention to Detail, Customer Service, Decision Making, Information Management, Interpersonal Skills, Oral Communication, Problem Solving, Teamwork and Technical Competence.

In addition to meeting the basic requirement above, to qualify for this position you must also meet the qualification requirements listed below: EXPERIENCE REQUIRED: Your resume must reflect the quality level of experience which demonstrates the possession of the knowledge, skills, abilities, and competencies necessary for successful job performance required for this position.

Examples of creditable experience include: IT experience leading cybersecurity, risk management, and information-assurance programs for complex intelligence systems, platforms, and National Security Systems operating across a geographically dispersed enterprise of multiple locations. KNOWLEDGE, SKILLS AND ABILITIES (KSAs): Your qualifications will be evaluated on the basis of your level of knowledge, skills, abilities and/or competencies in the following areas: 1.

Demonstrative knowledge of- and experience with current industry methods for evaluating, implementing, and disseminating information technology (IT) security assessment, monitoring, detection, and remediation tools and procedures utilizing standards-based concepts and capabilities. 2. Knowledge and understanding of IT server & client technologies (hardware and software) for the Windows, Unix and Linux operating systems, including their vulnerabilities and associated security controls.

Understand the threats to IT systems as well as the technologies and tools related to attacking and defending IT systems. 3. Knowledge of Industry leading cybersecurity principles and operational impacts of cybersecurity lapses and vulnerabilities using alerts, advisories, errata, and bulletins. 4.

Knowledge of a wide range of security concepts, principles, and practices to review, independently analyze and resolve difficult and complex cybersecurity problems; apply policy direction to contractors and government/military officials, and develop guidance for applying security policy, procedures, techniques, equipment, and methods to a variety of work situations and various levels or degrees of security controls. 5.

Skilled in discerning the protection requirements of information systems and networks against system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, Procedural Language/Structured Query Language [PL/SQL] and injections, race conditions, covert channel, replay, return oriented attacks, malicious code, etc.) and required countermeasures. 6.

Ability to effectively organize and analyze information, produce authoritative reports, position papers, and briefings that are responsive to the specific needs of commanders and senior management officials; present clear and concise findings; effectively advocate for a position; negotiate complex issues using mature judgment and experience. 7.

Ability to communicate effectively, both orally and in writing; ability to understand and communicate cloud computing deployment models in private, public, and hybrid environment and the difference between on-premises and off-premises environments. 8. Ability to manage a small staff and carry out all phases of personnel management responsibilities.

Ideal Candidate: The ideal candidate is a seasoned cybersecurity executive, mission partner, and people leader who can direct a blended civilian, contractor, officer, and enlisted workforce in protecting the Nation's most sensitive intelligence information, sources, and methods.

This individual will serve as AFMC/A2's principal intelligence information-security advisor and lead cybersecurity oversight for intelligence systems and platforms across the command, including oversight of the HAF-appointed Cross Domain Support Element supporting Air Force Intelligence Community Sensitive Compartmented Information cross-domain solutions.

The candidate will be equally capable of resolving difficult technical and policy issues, representing AFMC in senior Air Force, DoD, and Intelligence Community forums, and developing practical risk-informed options that preserve security while enabling commanders and directors to make informed decisions. Success requires sound judgment, enterprise perspective, exceptional written and oral communication, and the confidence to challenge assumptions constructively.

Providing senior leaders "decision space" and delivering defensible, mission-enabling solutions in a high-consequence national-security environment are highly sought after attributes of an ideal candidate. Position is designated special-sensitive and requires eligibility for access to Sensitive Compartmented Information (SCI), other intelligence-related Special Sensitive information, or involvement in Top Secret Special Access Programs (SAP) to fully perform the duties and responsibilities of the position.

A non-disclosure agreement must be signed. Illegal drug use by employees in sensitive positions presents a clear threat to the mission of the Air Force, national security, and public safety. Cybersecurity Certification is a condition of employment. This position includes cybersecurity and information assurance (IA) work as a paramount duty requirement. Per DoDM 8140.03, the incumbent of this position must achieve the appropriate IA certificate action within six months of assignment of these duties.

A waiver of this six-month requirement may be granted per DoDM 8140.03, C3.2.4.2 or C3.2.4.3. Failure to receive the proper IA certification may result in removal from this position. Certification Required: IAM Level III. PART-TIME OR UNPAID EXPERIENCE: Credit will be given for appropriate unpaid and or part-time work. You must clearly identify the duties and responsibilities in each position held and the total number of hours per week.

VOLUNTEER WORK EXPERIENCE: Refers to paid and unpaid experience, including volunteer work done through National Service Programs (i.e., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community; student and social). Volunteer work helps build critical competencies, knowledge and skills that can provide valuable training and experience that translates directly to paid employment.

You will receive credit for all qualifying experience, including volunteer experience.

• Command CIISO and focal point for the administration of the Air Force Materiel Command's (AFMC) ISR Cybersecurity Program. - As an AF IC DAO-R, incumbent's authorization decisions impact the confidentiality, integrity, and availability of AF IC element information resources, and determine if the security and privacy risk from operating a system or using a system, service, or application from an external provider is acceptable. - Lead and coordinate with senior military, civilian, and contract employees to complete highly complex security assessment and authorization activities. - Exercise supervisory personnel management responsibilities.