IT SPECIALIST (INFOSEC)

Your resume must demonstrate at least one year of specialized experience at or equivalent to the GS-12 grade level or pay band in the Federal service or equivalent experience in the private or public sector. Specialized experience must demonstrate the following: 1.

Risk Management Framework (RMF) Support: Experience assisting with the development, implementation, and continuous monitoring of Assessment and Authorization (A&A) packages (including System Security Plans and POA&Ms) utilizing systems like eMASS. 2. Vulnerability & Compliance Monitoring: Experience utilizing automated tools (e.g., ACAS, Splunk, VRAM, or similar SIEM/vulnerability scanners) to monitor networks, analyze compliance, and coordinate patch management or STIG implementation. 3.

Security: Experience implementing or supporting, security controls, such as Identity/Credential Access Management (ICAM), multi-factor authentication, least-privilege access, or continuous endpoint monitoring to defend networks against modern threats. 4. Policy Interpretation and Training: Experience verifying that systems and users comply with federal, DoD, or Navy cybersecurity instructions (to include Zero Trust directives) and ensuring organizational compliance with mandatory training requirements. 5.

Technical Advisory: Experience providing technical guidance to leadership, system administrators, and users regarding security control implementation and identifying potential vulnerabilities. Additional qualification information can be found from the following Office of Personnel Management website: Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., professional, philanthropic, religious, spiritual, community, student, social).

Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment.

You will develop, implement, and enforce cybersecurity policies, procedures, and best practices across the organization.,You will serve as the lead for all RMF activities, managing the A and A lifecycle for all information systems from initiation to decommissioning.,You will direct and conduct security operations including monitoring with tools like the Assured Compliance Assessment Solution (ACAS),Vulnerability Remediation Asset Manager (VRAM), and Security Information Event Management (SIEM) systems.,You will oversee the implementation of security configurations such as DISA Security Technical Implementation Guides (STIGs), and manage the Information Assurance Vulnerability Management (IAVM) program to ensure all patches and updates are applied.,You will act as the primary technical advisor on cybersecurity to command leadership, system administrators, and users.,You will review all proposed changes to networks and systems to ensure they meet security requirements.,You will be responsible for protecting the command's data by ensuring the confidentiality, integrity, and availability of all assets through robust security programs and controls.,You will manage the command's cyber workforce program.