IT Cybersecurity Specialist (INFOSEC) (Direct Hire)

Cybersecurity Jobs; Woodlawn (MD); On-site; USD 111,000 - 185,000; Full time

Benefits offered by this job

Federal benefits

Job summary

The U.S. Social Security Administration seeks an IT Cybersecurity Specialist (INFOSEC) to work onsite in Woodlawn, MD.

You will analyze data from cyber defense tools to investigate, respond to, and mitigate threats and vulnerabilities with the goal of reducing potential damage from cyber events. Responsibilities include analyzing logs from host, network, firewall, and IDS sources; validating IDS alerts using Wireshark, Splunk, and Tanium; coordinating with internal/external groups; and

Qualifications

• Specialized IT security experience in federal role at or above GS-12 level.
• Ability to plan, develop, implement, and maintain information security programs.
• Experience interpreting IT security policies and communicating security guidance.

Responsibilities

• Analyze log files and IDS/network data to identify threats.
• Validate IDS alerts and correlate with network traffic using industry tools.
• Lead coordination with internal/external teams and publish after-action reviews.
• Update security processes and procedures based on findings.
• Support SOC knowledge base and threat-hunting activities.

Skills

TS-SCI Clearance

US Citizenship

Threat Analysis

Incident Response

Security Policy

Tools

Wireshark

Splunk

Tanium

Job description

Protect critical information systems with a direct-impact cybersecurity role at the U.S. Social Security Administration (SSA). As an IT Cybersecurity Specialist (INFOSEC) working onsite in Woodlawn, MD, you will serve as a subject matter expert analyzing data from cyber defense tools to investigate, respond to, and mitigate threats and vulnerabilities. The goal is straightforward: reduce potential damage from cyber events.

Responsibilities

• Analyze log files, evidence, and other information from a range of sources, including individual host logs, network traffic logs, firewall logs, and intrusion detection system (IDS) logs.
• Identify potential threats to network security and determine the most effective methods for identifying perpetrator(s) involved in network intrusions.
• Validate IDS alerts against network traffic using industry tools including Wireshark, Splunk, and Tanium.
• Oversee working groups internal and external to the agency to support collaboration and build the Security Operations Center knowledge base.
• Coordinate and publish division-level after action reviews, and lead updates to processes and procedures based on after action findings.

Requirements

• Top-Secret Security Clearance (TS-SCI) required: must have (or be able to obtain) and maintain.
• U.S. Citizenship required.
• Selective Service Registration required if applicable (www.sss.gov).
• Fingerprinting and background and/or security investigation may be required; job offers are contingent on results.
• To meet Minimum Qualifications for the GS-13 Cybersecurity Specialist position, demonstrate:
  • Specialized Experience gained in a federal position at or above GS-12 (or equivalent level of responsibility and difficulty if on another federal pay scale or outside federal service), performing IT security program or policy work.
  • IT Competencies for the federal 2210 series.

Specialized Experience must primarily involve planning, developing, implementing, and/or maintaining information security programs or policies. Experience should include creating and interpreting IT security policies and procedures; assessing risks and developing disaster recovery or contingency plans; collaborating with other teams or agencies to develop and implement security solutions; and explaining technical security information and recommendations to different audiences.

Technology

• Wireshark
• Splunk
• Tanium

Benefits

• A comprehensive benefits package for federal employees; eligibility depends on the type of position and whether full-time, part-time, or intermittent.

Additional Employment Information

• Open to the public and eligible U.S. citizens, including certain federal transition and priority selection categories (CTAP, ICTAP, RPL).
• Relocation costs will not be paid.
• Telework may be authorized after conditions are met; to participate, you must reside within a 2-hour commute to the assigned Official Duty Station at the time of appointment.
• Non-bargaining unit position; not authorized to be filled virtually or through outstationing.
• Full-time flex-time schedule; Alternate Work Schedules (AWS) may be authorized.
• Critical sensitive position; you may be required to complete Standard Form 86 for sensitive positions.

Location: Chief of Security and Resiliency (SR) Cybersecurity, Woodlawn, MD (onsite)

Salary: $111,147 - $185,322 per year

Direct Hire Authority: This is a public notice and will be processed under the Office of Personnel Management’s delegated Direct Hire Authority. Under the Direct Hire Authority, Veterans Preference and the “Rule of Many” do not apply. Applications will be pooled and may be used to fill vacancies for up to 6 months after the closing date.

Agency Contact: [e-mail], Security and Resiliency, 6401 Security Blvd., Woodlawn, MD 21235