IT CyberSecurity Specialist (Data Security)

US Office of Administration; Washington (District of Columbia); Presencial; USD 90 000 - 130 000; Tempo integral

Resumo da oferta

The US Office of Administration seeks a Senior Data Security Analyst to ensure information systems security through risk-based controls, aligned with EOP requirements, federal regulations, and industry best practices. The role emphasizes logging, monitoring, vulnerability management, and ongoing system assessments.

Applicants must meet OPM basic requirements and possess specialized federal-level experience, including security assessments and authorization-to-operate participation.

Qualificações

• Basic requirements must be met as per OPM standards.
• One year of specialized experience at GS-11 level or equivalent.
• Experience implementing and maintaining security controls and monitoring.
• Ability to communicate threats, vulnerabilities, and risks to stakeholders.

Responsabilidades

• Implement and maintain technical security controls (logging, monitoring, configuration management, access control).
• Communicate threats, vulnerabilities, and risks to technical and non-technical audiences.
• Perform continuous monitoring through vulnerability information review and scanning.
• Conduct system security assessments and participate in authorization-to-operate processes.
• Ensure compliance with internal policies and applicable laws and standards.

Conhecimentos

Attention to Detail

Customer Service

Oral Communication

Problem Solving

Descrição da oferta de emprego

The incumbent serves as OAIT's Senior Data Security Analyst responsible for ensuring the security of information systems through implementation and assessment of risk-based cybersecurity controls, in compliance with EOP requirements, Federal regulations, industry best practices, and requirements set forth by organizational entities.

MINIMUM QUALIFICATION REQUIREMENTS All applicants must meet the qualification requirements outlined below to be considered minimally qualified for this position. The qualification requirements are in accordance with the OPM Qualification Standards.

ALL QUALIFICATIONS MUST BE MET BY THE CLOSING DATE OF THIS ANNOUNCEMENT.

BASIC REQUIREMENTS:

Applicants must meet one of the following criteria listed below in order to meet the basic requirement for the IT CyberSecurity Specialist position, 2210.

1. Attention to Detail - Is thorough when performing work and conscientious about attending to detail.
2. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services.
3. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately.
4. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations.

-AND-

SPECIALIZED EXPERIENCE

In addition to the Basic Requirements above, applicants must have a minimum of one year of specialized experience at a level of difficulty and responsibility comparable to the next lower grade or comparable pay band in the Federal service or equivalent experience in the private sector.

One full year of specialized experience equivalent to the GS-11 grade level in the Federal service or equivalent experience in the private sector which demonstrates all of the following:

1. Implementing and maintaining technical system security controls, such as logging and monitoring, vulnerability scanning, configuration management, and access control;
2. Communicating threats, vulnerabilities, and risks to technical and non-technical stakeholders;
3. Performing continuous monitoring of information systems through review of open source vulnerability information, vulnerability scanning, and ongoing system assessments;
4. Performing system security assessments, including experience executing assessments as part of system authorization to operate processes;
5. Maintaining compliance with internal policies and procedures and applicable laws, regulations, and standards in securing information systems.

Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience.