IT Specialist (APPSW)

U.S. Department of Defense; Richmond; On-site; GBP 65,000 - 98,000; Full time

Job summary

A government agency is seeking a cybersecurity professional to assist in maintaining information security practices, conducting vulnerability assessments, and providing technical guidance. The ideal candidate must be a U.S. citizen and familiar with the Risk Management Framework. This role involves working with various cybersecurity tools and ensuring compliance with federal regulations. The position requires technical expertise and the ability to collaborate effectively across teams.

Qualifications

• Must be a U.S. citizen.
• Experience in cybersecurity compliance and vulnerability management.
• Understanding of the Risk Management Framework (RMF) required.

Responsibilities

• Assist with FISMA documents and implement cybersecurity best practices.
• Conduct vulnerability assessments and manage remediation efforts.
• Provide technical guidance on data integrity and security best practices.

Skills

Cybersecurity best practices

Vulnerability assessments

Risk Management Framework (RMF)

Agile Methodologies

Technical guidance

Tools

ACAS

WebInspect

Job description

See below for important information regarding this job. Position will be filled at any of the locations listed below. Site specific salary information as follows:

• Battle Creek, MI: $88,621 - $115,213
• Columbus, OH: $92,475 - $120,222
• Dayton, OH: $91,922- $119,504
• Fort Belvoir, VA: $101,401- $131,826
• New Cumberland, PA: $101,401- $131,826
• Ogden, UT: $88,621 - $115,213
• Philadelphia, PA: $97,653- $126,955
• Richmond, VA: $92,573- $120,350

Duties

• The incumbent works in the Defense Logistics Agency (DLA), Information Operations (J6), Program Executive Office (J62), Platform Technical and Application Support (J62XF), Application and Compliance Technical Support (J62XFB).
• Cybersecurity Compliance and FISMA Support: Assist with FISMA docs and implement cybersecurity best practices to maintain a strong enterprise- level IA posture across all environments (TandD, Prod, COOP). Adhere to current information security practices.
• Vulnerability Management and Remediation: Conduct vulnerability assessments using various tools (ACAS, WebInspect, STIGs) and lead remediation efforts for OS, DB, and apps. Manage POAMs and create vulnerability reports for Government repository.
• Risk Management and RMF Expertise: Apply in-depth knowledge of the Risk Management Framework (RMF) to assess IA controls, identify risks, and develop mitigation strategies. Conduct RMF Authorization Reviews of DLA ERP Applications.
• Technical Guidance and Collaboration: Provide technical guidance on data integrity, emerging technologies, and security best practices. Support internal and external audits, including CAP planning and execution. Experience in Agile Methodologies.
• Coordination and Documentation: Coordinate PPSM, CLSA, and Firewall requests, maintain documentation, and support build account creation for emerging technologies. Assist in coordinating, analyzing, planning, and remediating CORA findings.

Requirements

• Must be a U.S. citizen
• Tour of Duty: Set Schedule
• Security Requirements: Non-Critical Sensitive
• Appointment is subject to the completion of a favorable suitability or fitness determination, where reciprocity cannot be applied; unfavorably adjudicated background checks will be grounds for removal.
• Fair Labor Standards Act (FLSA): Exempt
• Selective Service Requirement: Males born after 12-31-59 must be registered or exempt from Selective Service.
• Recruitment Incentives: Not Authorized
• Bargaining Unit Status: Yes
• Pre-Employment Physical: Not Required
• Selectees are required to have a REAL ID or other acceptable identification documents to access certain federal facilities. See https://www.tsa.gov/real-id for more information.
• This position and any future selections from this announcement may be used to fill various shifts located anywhere within DLA Information Operations, J6.
• Defense Acquisition Workforce position. Must complete DoD certification and other requirements. See Addtl Info.