IT Cybersecurity Specialist (InfoSec)

Social Security Administration; Denver (CO); Hybride; USD 70 000 - 105 000; Plein temps

Résumé du poste

Social Security Administration is seeking an IT Cybersecurity Specialist to support day-to-day cybersecurity operations, protect SSA information systems, and implement programs, policies and digital tools. The role emphasizes risk assessment, security testing, and collaboration with stakeholders to meet federal standards.

Responsibilities include risk analysis, access control, security software deployment, and translating requirements into technical solutions while maintaining clear

Qualifications

• IT competencies for 2210 series
• Specialized IT security experience requirements
• Clear description of duties showing IT security work

Responsabilités

• Ensure the security and integrity of systems, networks and data.
• Test and deploy cybersecurity capabilities and software solutions for threat detection, incident response, data protection and compliance.
• Apply the Risk Management Framework (RMF) to identify, assess and mitigate risks to SSA data and systems.
• Develop and implement risk mitigation strategies with stakeholders per federal standards.
• Perform risk analysis, access management, security app development and testing, audit support, and research.

Connaissances

Attention to Detail

Customer Service

Decision Making

Information Management

Oral Communication

Problem Solving

Teamwork

Technical Competence

Outils

RMF frameworks

Description du poste

Summary

See QUALIFICATIONS for information about this position. Supports the day-to-day functionality and protection of Social Security Administration information technology systems by developing and implementing cybersecurity programs, policies, procedures and digital tools. See DUTIES for responsibilities.

Duties

• Ensure the security and integrity of systems, networks and data.
• Test and deploy cybersecurity capabilities and software solutions, ensuring their effectiveness in threat detection, incident response, data protection and compliance.
• Apply the Risk Management Framework (RMF) to identify, assess and mitigate risks to the confidentiality, integrity and availability of SSA data and systems.
• Work with stakeholders to develop and implement risk mitigation strategies in accordance with federal standards.
• Perform risk analysis, access management, security application development and testing, audit support, technology research and implementation.
• Consult with customers and stakeholders to evaluate functional requirements, translate them into technical solutions and deliver actionable results to support the agency’s cybersecurity mission.
• Communicate the agency’s cybersecurity program, policies and initiatives to internal and external stakeholders, ensuring awareness and understanding of security requirements and best practices.

Qualifications

To meet Minimum Qualifications for this IT Cybersecurity Specialist position you must demonstrate (1) the IT Competencies for the federal 2210 series AND (2) Specialized Experience (or optional education). Your resume must describe your IT-related experience to demonstrate these qualifications. Consideration will be given to paid or unpaid work, as well as relevant assignments or tasks completed as part of your education or training. Your resume must clearly describe the duties you perform(ed) that provide experience in these areas.

IT Competencies relevant to this position:

• Attention to Detail: Is thorough when performing work and conscientious about attending to detail.
• Customer Service: Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services.
• Decision Making: Makes sound, well-informed, and objective decisions; perceives the impact and implications of decisions; commits to action, even in uncertain situations, to accomplish organizational goals; causes change.
• Information Management: Identifies a need for and knows where or how to gather information; organizes and maintains information or information management systems.
• Interpersonal Skills: Shows understanding, friendliness, courtesy, tact, empathy, concern, and politeness to others; develops and maintains effective relationships with others; may include effectively dealing with individuals who are difficult, hostile, or distressed; relates well to people from varied backgrounds and different situations.
• Oral Communication: Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and to respond appropriately.
• Problem Solving: Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations.
• Teamwork: Encourages and facilitates cooperation, pride, trust, and group identity; fosters commitment and team spirit; works with others to achieve goals.
• Technical Competence: Uses knowledge that is acquired through formal training or on-the-job experience to perform one's job; works with, understands, and evaluates technical information related to the job; advises others on technical issues.

Specialized Experience for GS-09

• Participating in the development of IT security policies and procedures.
• Participating with risks assessments and helping develop disaster recovery or contingency plans.
• Participating with collecting, analyzing, and documenting security-related information and recommendations
• Participating with explaining technical security information and recommendations to different audiences.

In lieu of specialized experience, you can meet requirements with a master's degree or at least 2 full academic years of progressively higher graduate-level education leading to a master's (or equivalent) degree. (See EDUCATION)

Specialized Experience for GS-11

• Assisting with the development of IT security policies and procedures.
• Assisting with risks assessments and helping develop disaster recovery or contingency plans.
• Assisting with collecting, analyzing, and documenting security-related information and recommendations
• Assisting with explaining technical security information and recommendations to different audiences.

In lieu of specialized experience, you can meet requirements with a Ph.D. or at least 3 full academic years of progressively higher graduate-level education leading to a Ph.D.(or equivalent degree). (See EDUCATION)

MINIMUM QUALIFICATIONS (Specialized Experience or optional education and IT Competencies) must be met by the closing date of this announcement. Selectees must have (or be able to obtain) and maintain a Top Secret Security Clearance (TS-SCI).

NOTES ABOUT THIS CAREER-LADDER POSITION This is a mid-level position leading to the GS-12 full performance level. Assignments are developmental in nature and designed to provide experience and technical competence in the methods, procedures, principles and techniques of the full performance level. The supervisor defines objectives, priorities and deadlines, is available for consultation and assists with unusual situations, problems or studies that do not have clear precedents. Employees consult with higher graded analysts to identify problems and methods of approach, but are expected to perform standard, routine duties independently. The supervisor evaluates reports and other completed work for technical soundness, appropriateness of conclusions or recommendations, consistency and relevance. During this period of training, management broadens assignments to enable the incumbent to eventually perform all the duties of the next higher grade. Consideration for promotion is at the discretion of management and is based on the existence of higher-level work your ability to perform that work, administrative requirements and current agency and/or organizational restrictions. Information on this job series can be found at https://www.opm.gov/policy-data-oversight/classification-qualifications/competency-based-policy/general-schedule/2200/2210-competency-based-policy/competency-based-qualification-standard/

Education

This position does not have an educational requirement but specific education can be used in lieu of Specialized Experience. DO NOT SUBMIT A DIPLOMA IN LIEU OF A FULL TRANSCRIPT THAT SHOWS THE REQUIRED INFORMATION. TRANSCRIPTS TO SUPPORT EDUCATION IN LIEU OF SPECIALIZED EXPERIENCE: To support education in lieu of Specialized Experience, your transcript must show your name, the name of the school, the program in which you were enrolled and the date your degree was conferred. Transcripts without a confer date cannot be considered to have resulted in a degree and may not be usable to demonstrate your “in lieu of Specialized Experience qualifications.”

FOR GS-09: If you claim a master's degree in lieu of Specialized Experience submit your full transcript showing your name, the name of the school, the program in which you were enrolled and the date your degree was conferred. Transcripts without a confer date cannot be considered to have resulted in a degree and may not be usable to demonstrate your “in lieu of Specialized Experience qualifications.” Your degree must be from an accredited institution in a relevant technology field (such as cybersecurity, computer science, information systems management, engineering, mathematics or operations research) or include at least 24 semester hours of coursework in those areas.

If you claim a bachelor's degree followed by 2 academic years of progressively higher-level graduate education leading to a master's degree in a relevant technology field (such as cybersecurity, computer science, information systems management, engineering, mathematics or operations research) submit the full transcript for your bachelor's degree as well as the transcript that supports your 2 academic years of progressively higher-level graduate education leading to a master's degree.

FOR GS-11: If you claim a Ph.D. in lieu of Specialized Experience submit your full transcript showing your name, the name of the school, the program in which you were enrolled and the date your degree was conferred. Transcripts without a confer date cannot be considered to have resulted in a degree and may not be usable to demonstrate your “in lieu of Specialized Experience qualifications.” Your degree must be from an accredited institution in a relevant technology field (such as cybersecurity, computer science, information systems management, engineering, mathematics or operations research) or include at least 24 semester hours of coursework in those areas.

If you claim 3 academic years of progressively higher-level graduate education leading to a Ph.D. in a relevant technology field (such as cybersecurity, computer science, information systems management, engineering, mathematics or operations research) submit the full transcript for your bachelor's degree as well as the transcript that supports your 3 academic years of progressively higher-level graduate education leading to a master's degree.

Unofficial transcripts or screenshots of electronic/web transcripts with the required information will be accepted at the time of application. CHECK YOUR UNOFFICIAL TRANSCRIPT TO CONFIRM IT SHOWS THE REQUIRED INFORMATION. You must upload your transcripts as part of your application. Documents will not be accepted via email or regular mail. Foreign Education: Education completed in colleges or universities outside the United States may be used to meet the education requirement, but you must also provide documentation that the education credentials have been evaluated by a private organization that specializes in interpretation of foreign education programs and such education has been deemed equivalent to that gained in a conventional/accredited U.S. education program; or full credit has been given for the courses at a U.S. accredited college or university. NOTE: It is your responsibility to acquire and provide Certification of US equivalency as part of your application. For a list of Credential Evaluation Services see: Credential Evaluation Services. If selected, you will be required to provide your official college transcripts prior to the effective date of your appointment.

Additional Information

Additional selections may be made for this vacancy up to six months from the closing date of this announcement. If you are a male born after December 31, 1959, you must certify that you have registered with the Selective Service System or are exempt under the Selective Service Law. See www.sss.gov . If you are a federal contractor, do not identify yourself as a federal employee. See QUALIFICATIONS and EDUCATION for information on qualifying for position. See REQUIRED DOCUMENTS and HOW YOU WILL BE EVALUATED for information on applying for this position. This is a non-bargaining unit position. This is a career-ladder position leading to the GS-12 Full Performance Level (FPL). This position is not authorized to be filled virtually or through outstationing. One or more vacancies may be filled at any of the listed Official Duty Stations (ODS). This position is on a full-time, flex-time schedule. Telework may be approved after all conditions for telework have been met. To participate in telework, when authorized, you must reside within a 2-hour commute to the assigned ODS by the time of your appointment. Relocation expenses will not be paid; salary will be set in accordance with locality pay provisions. (See Salaries & Wages) Successful performance of work in this position and adherence to conditions of this position will be assessed during the 1-year probationary period that may be served by new appointees (e.g., new to SSA and/or new to this series). You must have (or be able to obtain) and maintain a Top-Secret Security Clearance (TS-SCI). This is a special sensitive position. You may be required to complete Standard Form 86, Questionnaire for Sensitive Positions, to have the appropriate investigation conducted. Location of position: Chief of Security and Resiliency (SR) / Cybersecurity

Do you have a desire to: help SSA manage its Social Security programs? analyze and solve problems? help and advise millions of retired and disabled individuals? work on a team to make a difference in people’s lives and your own? Join SSA, one of the Best Places to Work in the Federal Government!