IT SPEC (INFOSEC)

NATIONAL GUARD MEMBERSHIP IS REQUIRED: This is a Title 32 excepted service position that requires membership in the Nebraska Army National Guard. Selectee will be required to wear the military uniform daily. Acceptance of an excepted service position constitutes concurrence with these requirements as a condition of employment.

Applicants who are not currently a member of the National Guard must be eligible for immediate membership and employment in the National Guard in the military grade listed in this announcement. FOR QUESTIONS REGARDING ELIGIBILITY TO JOIN THE NEBRASKA AIR NATIONAL GUARD PLEASE CONTACT THE LOCAL RECRUITING OFFICE AT 402-309-1172.

OPEN AREAS OF CONSIDERATION: AREA 1, 2 and 3 DEFINITION OF AREA(S) OF CONSIDERATION: AREA 1: Current permanent and indefinite technicians of the Nebraska Army or Air National Guard; and current Title 5 employees of the Nebraska Military Department who are military members of the Nebraska National Guard. AREA 2: All Drill Status/M-Day members and temporary technicians of the Nebraska Air or Army National Guard.

AREA 3: Current military service members who are willing and eligible to become members of the Nebraska Air or Army National Guard. AREA 4: All qualified candidates eligible and willing to become a member of the Nebraska National Air or Army National Guard prior to the effective date of hire. Military Grades: Maximum: E6; Minimum: E1; Military Grade inversion within the full time work forces is not permitted.

The military grade of the full time supervisor must equal or exceed the military grade of the personnel supervised. Compatibility will be followed in accordance with 32 USC 709(b) and 10 USC 10216. Compatibility requirements must be met prior to appointment to the position.

Security Clearance/Background Check requirements: In order to comply with US DOD requirements and ensure the safety and security of the missions, programs, property and personnel of the Nebraska Military Department, employees must obtain the appropriate background investigation and maintain the level of security clearance assigned to their respective work.

Failure to obtain, within one year of appointment, and maintain the designated type of security clearance/background check required for the respective work may result in a job offer being rescinded, separations of employment, or other actions as may be deemed in the best interest of the agency.

Prior to appointment individuals must meet the security clearance requirements for the position or submit the required documents of the Nebraska National Guard, Personnel Security Manager for processing the appropriate investigation. Required forms: SF86, PSIP Initiation Form, Fingerprints, OF306 and Application/Resume. Nebraska National Guard Information Security Specialist - [email protected]; 402-309-1129.

GENERAL EXPERIENCE: Experience, education, and/or training that has provided a basic knowledge of data processing functions and general management principles that enabled the applicant to understand the stages required to automate a work process. Experience may have been gained in work such as computer operator or assistant, computer sales representative, program analyst, or other positions that required the use or adaptation of computer programs and systems.

SPECIALIZED EXPERIENCE: GS-07: At least 1 year experience at the previous lower grade or equivalent experience, education, or training in translating detailed logical steps developed by others into language codes that computers accept where this required understanding of procedures and limitations appropriate to use of a programming language.

Experience interviewing subject-matter personnel to get facts regarding work processes, and synthesizing the resulting data into charts showing information flow GS-09: At least 1-year specialized experience equivalent to at least the next lower grade. In addition to the OPM IORs (Alternative A) specialized experience examples, specialized experience includes experience, education, or training receiving, maintaining, and issuing data storage media for computer operations.

Experience in scheduling the use of computer time for program processing. Experience collecting and sequentially staging input media with associated program instructions for processing. Experience in at least one programming language. Translating detailed logical steps developed by others into language codes that computers accept where this required understanding of procedures and limitations appropriate to use of a programming language.

Experience interviewing subject-matter personnel to get facts regarding work processes and synthesizing the resulting data into charts showing information flow. Experience in analysis of the interrelationship of pertinent components of the system. Experience planning the sequence of actions necessary to accomplish the assignment. Experience scheduling the sequence of programs to be processed by computers where alternatives had to be weighed with a view to production efficiency.

GS-11: At least 1-year specialized experience equivalent to at least the next lower grade. In addition to the OPM IORs (Alternative A) specialized experience examples, specialized experience includes experience, education, or training that approaches techniques and requirements appropriate to an assigned computer applications area or computer specialty area in an organization.

Experience planning the sequence of actions necessary to accomplish the assignment where this entailed coordination with others outside the organizational unit and development of project controls. Experience that required adaptations of guidelines or precedents to meet the needs of the assignment. Experience preparing documentation on cost/benefit studies where is involved summarizing the material and organizing it in a logical fashion.

As a IT SPEC (INFOSEC), GS-2210-7/9/11, duties include: 1. Serves as the Wing Information Assurance Manager. Applies Information Technology (IT) security principles, methods, and security products to protect and maintain the availability, integrity, confidentiality, and accountability of information system resources and information processed throughout the system's life cycle.

Establishes and publishes base-wide policy to manage the INFOSEC (also known as COMPUSEC) program and provides advice and guidance in its implementation and in procedures used in the development and operation of systems. Assists all base organizations in the development of their individual INFOSEC program. Disseminates information and ensures computer security practices are adhered to by all functional areas. Reviews, analyzes, and validates certification and accreditation (C&A) packages.

Continuously identifies and analyzes threats and vulnerabilities to the information systems to maintain an appropriate level of protection. Ensures computer software designs address information system security requirements. Accomplishes risk analysis, security testing, and certification due to modifications or changes to computer systems.

Evaluates, assesses, or locally tests and approves all hardware, software, and firmware products that provide security features prior to use on any accredited information system or network. Certifies all software prior to installation and use on communications and computer systems. Executes computer security plans and enforces mandatory access control techniques such as trusted routers, bastion hosts, gateways, firewalls, or other methods of information systems protection. 2. Manages the Network Security Program.

Maintains required information assurance certification IAW DoD 8570.01-M, Federal Information Security Management Act of 2002, Clinger Cohen Act of 1996. Implements and advises on IT security policies and procedures to ensure protection of information transmitted to the installation, among organizations on the installation, and from the installation using Local Area Networks (LAN), Wide Area Networks (WAN), the World Wide Web, or other communications modes.

Utilizes current and future multi-level security products collectively to provide data integrity, confidentiality, authentication, non-repudiation, and access control of the LAN. Reports to MAJCOM, Air Force Communications Agency, National Security Agency, and Air Force Computer Emergency Response Team all incidents involving viruses, tampering, or unauthorized system entry. Controls access to prevent unauthorized persons from using network facilities.

Limits access to privileged programs (i.e., operating system, system parameter and configuration files, and databases), utilities, and security-relevant programs/data files to authorized personnel. Implements methods to prevent or minimize direct access, electronic or other forms of eavesdropping, interpreting electro-mechanical emanations, electronic intercept, telemetry interpretation, and other techniques designed to gain unauthorized access to IT information, equipment, or processes.

Evaluates unusual circumstances to recognize and define potential vulnerabilities and selects and oversees the installation of physical and technical security barriers to prevent others from improperly obtaining such information. Conducts the Information Assurance Awareness Program which uses computer-based training for both initial and recurring information protection training. Maintains required course records. 3.

Serves as the Communications Security (COMSEC) Manager for all cryptographic activities including managing the Cryptographic Access Program (CAP). Formulates and develops communications security criteria and requirements for inclusion in mobility, contingency, and exercise plans. Maintains accountability for sensitive cryptographic materials and related COMSEC information. Oversees issuance of COMSEC materials. Maintains COMSEC inventory.

Prepares and evaluates written plans for emergency actions and ensures personnel are fully qualified in the execution of plans. Investigates COMSEC security incidents to determine the possibility of compromise to COMSEC materials and ensures documentation and reporting to appropriate channels. Performs destruction, receiving, issuing transferring and inspecting COMSEC material within the most stringent timelines.

Furnishes written guidance to user accounts concurring effective dates, accounting procedures, destruction requirements, and physical security of COMSEC materials including key. Performs semi-annual functional reviews of all COMSEC user accounts, physically inspecting the user's COMSEC facilities, reviewing procedures, and audit of all cryptographic holdings. --Performs other duties as assigned