IT Specialist (INFOSEC)

US Smithsonian Institution; Washington (District of Columbia); On-site; USD 102,000 - 133,000; Full time

Benefits offered by this job

Vacation and sick leave

Holidays

Health/life insurance

Accident insurance

Excellent retirement program options

Flexible Spending Accounts

Long Term Care Insurance

Retirement Program

Job summary

Smithsonian Institution is seeking an Information Systems Security Officer (ISSO) for the National Museum of African American History and Culture (NMAAHC). The role is onsite within the Office of Operations, IT Branch, and focuses on security planning, validation, and incident response to support IT network compliance.

The position is full-time, permanent, with telework eligibility per agency policy. Salary for this GS-12 position ranges from $102,415 to $133,142 per year.

Qualifications

• Experience developing and implementing information security procedures.
• Experience reviewing network security vulnerabilities with network support teams.
• Ability to apply the A-I-C triad to protect information systems.

Responsibilities

• Develop and implement IT infrastructure security plans to protect data and media.
• Review security posture of routers, switches, Windows, UNIX, Linux servers, firewalls, IDS/IPS.
• Identify vulnerabilities and coordinate remediation with security and network teams.
• Establish procedures to monitor, identify and report AIS security breaches.

Skills

Attention to Detail

Customer Service

Decision Making

Information Management

Interpersonal Skills

Oral Communication

Problem Solving

Teamwork

Technical Competence

Tools

MS Windows

SUN servers

Linux

Job description

Protecting museum-grade IT requires security planning, technical validation, and fast incident awareness. In this onsite role within the Smithsonian Institution’s Office of Operations, Information Technology (IT) Branch at NMAAHC, you will serve as an Information Systems Security Officer (ISSO), helping ensure information security procedures that support compliance for NMAAHC’s IT network infrastructure.

You will focus on developing and implementing security plans, reviewing network defenses, and responding to security findings and suspected or actual AIS security breaches. The position is full-time, permanent, and telework eligible according to agency policy. Salary for this GS-12 position ranges from $102,415 to $133,142 per year.

What you’ll do

• Ensure annual IT Infrastructure security plans are developed and implemented to protect data transmission and storage media from unauthorized access.
• Regularly review security posture on deployed infrastructure including routers, switches, MS Windows servers, SUN servers, Linux servers, firewalls, IDSs, and IPSs, comparing installed configurations to vendor product documentation and/or websites to confirm appropriate security defenses and deterrents.
• Identify network security vulnerabilities and coordinate with computer security and network support teams to remediate IT security findings.
• Establish and implement procedures for monitoring, identifying, and reporting suspected or actual AIS security breaches affecting IT infrastructure equipment, software, stored data, computer outputs, and/or the physical environment.

Required qualifications

• Pass Pre-employment Background Investigation.
• May need to complete a Probationary Period.
• Maintain a bank account for direct deposit/electronic transfer.
• Males born after 12/31/59 must be registered with Selective Service.
• IT-related experience demonstrating each of the nine competencies: Attention to Detail, Customer Service, Decision Making, Information Management, Interpersonal Skills, Oral Communication, Problem Solving, Teamwork, Technical Competence.
• Experience developing and implementing information security procedures that support IT security compliance.
• Experience reviewing network security vulnerabilities and working with network support teams to rectify security breaches.
• Ability to use the Availability, Integrity, Confidentiality (A-I-C) triad to protect information systems from unauthorized access.

Security and IT technologies you may work with

• MS Windows, SUN servers, Linux
• Routers, switches, firewalls
• IDSs, IPSs
• AIS

Benefits and support

• Vacation and sick leave
• Holidays
• Health/life insurance
• Accident insurance
• Excellent retirement program options
• Flexible Spending Accounts
• Long Term Care Insurance
• Retirement Program

Application and eligibility notes

• Open to the public: U.S. Citizens, U.S. Nationals or those who owe allegiance to the U.S.
• Federal employees with permanent status or individuals eligible for special appointing authorities may also apply under Job Announcement #27R-DT-314910-MPA-NMAAHC.
• This position is included in the bargaining unit.
• Recruitment incentives may be authorized; if authorized, certain incentives may require a service agreement for a specified time period.
• Announcement closes at 11:59 pm Eastern Time on the earlier of the listed closing date or when 100 applications are received.
• Paper applications may be accepted with prior approval of the Contact Person listed in the announcement.

How you’ll be evaluated

Evaluation will be based on how well you meet the qualifications, with applicants potentially assessed in multiple stages. Online multiple-choice questions may evaluate experience and training related to computer and data security engineering, monitoring and identifying AIS security breaches, risk and vulnerability for technical guidance and security planning, and enterprise-level operational security administration, certification, and accreditation.

Required documents

• Resume (must be no more than two (2) pages)
• Proof of Veteran’s Preference (DD214 Member 4 Copy) if applicable; applicants claiming 10-point preference must include Standard Form (SF) 15 and additional required documentation
• Unofficial school transcripts if using education to qualify (official transcripts required before appointment if selected)
• Proof of U.S. accreditation for foreign study, if applicable