IT Specialist (INFOSEC)

To qualify for an IT Specialist (INFOSEC), your resume and supporting documentation must include: A. Specialized Experience: One year of specialized experience that equipped you with the particular competencies to successfully perform the duties of the position, and is directly in or related to this position. To qualify at the GS-12 level, applicants must possess one year of specialized experience equivalent to the GS-11 level or equivalent under other pay systems in the Federal service, military or private sector.

Applicants must meet eligibility requirements including Time-in-grade (General Schedule (GS) positions only), time after competitive appointment, minimum qualifications, and any other regulatory requirements by the cut-off/closing date of the announcement.

Creditable specialized experience includes: - Makes technical judgments of the system's compliance in both technical and non- technical security features, system features and other safeguards. - Identifies vulnerabilities, risks and protection needs. - Conducts risk assessments and advise the applicable stakeholders on the potential impact of threats and vulnerabilities to the system. - Reviews and provides input to analyses of alternatives and mitigations to achieve an effective security solution that enables the mission and overall business functions.

Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional, philanthropic, religious, spiritual, community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience.

Performs and coordinates Cybersecurity Vulnerability Management processes and procedures that facilitates and ensure effective levels of IT availability, confidentiality, and integrity within the DLA.,Ensures vulnerability scans are conducted on all applicable IT and Operational Technology (OT) assets on a prescribed frequency utilizing approved vulnerability scanning solutions.,Identifies Secure Technical Implementation Guide (STIG) deficiencies across the enterprise and coordinate remediation and mitigation across J6.,Ensures that the highly varied telecommunications/network hardware and software components, with diverse capabilities and limitations, operate in a secure environment while supporting DLA business processes.,Implements Department of Defense (DoD) IT security policies, programs, and procedures as promulgated by DLA and DoD guidelines.