IT SPEC (INFOSEC)

Air National Guard Units; Lincoln (NE); Ibrido; USD 57.000 - 98.000; Tempo pieno

Descrizione del lavoro

Air National Guard Units in the United States is seeking an IT SPEC (INFOSEC) at GS-2210-7/9/11 to lead the Wing Information Assurance program and oversee security across information systems. The role requires applying IT security principles and publishing base-wide INFOSEC policy while guiding base organizations on program implementation.

Responsibilities include risk analysis, C&A oversight, and enforcing access controls and security measures.

Competenze

• Degree in computer science, engineering, information science, information systems management, mathematics, operations research, statistics, or technology management or degree with at least 24 semester hours in related fields.
• Experience with IT security, risk analysis, and security program management preferred.
• Must meet DoD 8570.01-M and be eligible for security clearance.

Mansioni

• Serve as Wing Information Assurance Manager and enforce INFOSEC practices.
• Publish base-wide INFOSEC policy and advise on implementation.
• Review C&A packages and analyze threats to information systems.
• Evaluate hardware/software for security features before use.
• Manage Network Security Program and maintain required certifications.

Conoscenze

INFOSEC knowledge

C&A (Certification & Accreditation)

Risk analysis

Network security

DoD 8570.01-M

Formazione

CS/Engineering/Information Science degree (or related) with 24 hrs in related fields

Descrizione del lavoro

THIS IS A NATIONAL GUARD TITLE 32 EXCEPTED SERVICE POSITION. This National Guard position is for a IT SPEC (INFOSEC), Position Description Number D2178P01 and is part of the NE 155 CF, National Guard.

Key Responsibilities

As a IT SPEC (INFOSEC), GS-2210-7/9/11, duties include: 1. Serves as the Wing Information Assurance Manager. Applies Information Technology (IT) security principles, methods, and security products to protect and maintain the availability, integrity, confidentiality, and accountability of information system resources and information processed throughout the system's life cycle.

Establishes and publishes base-wide policy to manage the INFOSEC (also known as COMPUSEC) program and provides advice and guidance in its implementation and in procedures used in the development and operation of systems. Assists all base organizations in the development of their individual INFOSEC program. Disseminates information and ensures computer security practices are adhered to by all functional areas.

Reviews, analyzes, and validates certification and accreditation (C&A) packages. Continuously identifies and analyzes threats and vulnerabilities to the information systems to maintain an appropriate level of protection. Ensures computer software designs address information system security requirements. Accomplishes risk analysis, security testing, and certification due to modifications or changes to computer systems.

Evaluates, assesses, or locally tests and approves all hardware, software, and firmware products that provide security features prior to use on any accredited information system or network. Certifies all software prior to installation and use on communications and computer systems. Executes computer security plans and enforces mandatory access control techniques such as trusted routers, bastion hosts, gateways, firewalls, or other methods of information systems protection. 2.

Manages the Network Security Program. Maintains required information assurance certification IAW DoD 8570.01-M, Federal Information Security Management Act of 2002, Clinger Cohen Act of 1996.

Implements and advises on IT security policies and procedures to ensure protection of information transmitted to the installation, among organizations on the installation, and from the installation using Local Area Networks (LAN), Wide Area Networks (WAN), the World Wide Web, or other communications modes.

Utilizes current and future multi-level security products collectively to provide data integrity, confidentiality, authentication, non-repudiation, and access control of the LAN. Reports to MAJCOM, Air Force Communications Agency, National Security Agency, and Air Force Computer Emergency Response Team all incidents involving viruses, tampering, or unauthorized system entry. Controls access to prevent unauthorized persons from using network facilities.

Limits access to privileged programs (i.e., operating system, system parameter and configuration files, and databases), utilities, and security-relevant programs/data files to authorized personnel.

Implements methods to prevent or minimize direct access, electronic or other forms of eavesdropping, interpreting electro-mechanical emanations, electronic intercept, telemetry interpretation, and other techniques designed to gain unauthorized access to IT information, equipment, or processes.

Evaluates unusual circumstances to recognize and define potential vulnerabilities and selects and oversees the installation of physical and technical security barriers to prevent others from improperly obtaining such information. Conducts the Information Assurance Awareness Program which uses computer-based training for both initial and recurring information protection training. Maintains required course records. 3.

Serves as the Communications Security (COMSEC) Manager for all cryptographic activities including managing the Cryptographic Access Program (CAP). Formulates and develops communications security criteria and requirements for inclusion in mobility, contingency, and exercise plans. Maintains accountability for sensitive cryptographic materials and related COMSEC information. Oversees issuance of COMSEC materials. Maintains COMSEC inventory.

Prepares and evaluates written plans for emergency actions and ensures personnel are fully qualified in the execution of plans. Investigates COMSEC security incidents to determine the possibility of compromise to COMSEC materials and ensures documentation and reporting to appropriate channels. Performs destruction, receiving, issuing transferring and inspecting COMSEC material within the most stringent timelines.

Furnishes written guidance to user accounts concurring effective dates, accounting procedures, destruction requirements, and physical security of COMSEC materials including key. Performs semi-annual functional reviews of all COMSEC user accounts, physically inspecting the user's COMSEC facilities, reviewing procedures, and audit of all cryptographic holdings. --Performs other duties as assigned

Requirements & Education

Education: All academic degrees and coursework must be from accredited or pre-accredited institutions Undergraduate or Graduate Education: Degree in computer science, engineering, information science, information systems management, mathematics, operations research, statistics, or technology management or degree that provided a minimum of 24 semester hours in one or more of the fields identified above and required the development or adaptation of applications, systems or networks.

Which agency is hiring for this position?

This position is with Air National Guard Units, Department of the Air Force.

What is the salary for this position?

The posted pay range is $57331 – $97867/yr.

Is this position remote or telework eligible?

This position is eligible for telework.

What security clearance is required?

This position requires a Top Secret security clearance.

What is the application deadline?

Applications close on 2027-10-03.

Who is eligible to apply?

This position is open under the 'Fed Internal Search' hiring path.