Supervisory IT Cybersecurity Specialist-Direct Hire

US Bureau of Alcohol, Tobacco, Firearms and Explosives; Washington (District of Columbia); On-site; USD 140,000 - 170,000; Full time

Job summary

The ATF Office of Science and Technology, Office of Cybersecurity seeks a Supervisory IT Cybersecurity Specialist (GS-15) to lead enterprise security programs and guide RMF-based risk management. This role requires senior expertise in cybersecurity theory, policy, and incident response to support ATF’s regulatory, criminal enforcement, and administrative missions.

Direct-Hire Authority is used for this recruitment to address critical staffing needs.

Qualifications

• Specialized experience required as described in the vacancy announcement.
• Experience in cybersecurity theories, principles, standards and practices.

Responsibilities

Skills

Cybersecurity

Security governance

Education

GS-15 eligibility criteria

Job description

The Chief Information Security Officer (CISO) will work in the Office of Science and Technology (OST), Office of Cybersecurity. This position supports enterprise IT capabilities that enable ATF's regulatory, criminal enforcement, and administrative missions.

Direct-Hire Authority (DHA) is a hiring authority granted by the Office of Personnel Management (OPM) to address critical hiring needs or severe candidate shortages.

Specialized experience

To qualify for the Supervisory IT Cybersecurity Specialist position at the GS-15 grade level, candidates must meet the following specialized experience by the closing date of this announcement.

Specialized experience is demonstrated experience, which has equipped the applicant with the particular knowledge, skills and abilities to perform successfully the duties of this position. Experience must be in the normal line of progression or must be related to the work of the position advertised and must be reflected in resume.

EXPERIENCE

Candidates must have at least one year of specialized experience equivalent to the next lower grade level (GS-14) (obtained in either the public or private sectors). This experience must include all of the following:

• Serving as a technical authority in cybersecurity theories, principles, concepts, standards, methods, and practices; AND
• Managing enterprise-level security programs involving Federal information security law and policy, Office of Management and Budget (OMB) requirements, National Institute of Standards and Technology (NIST) guidance, the Federal Information Security Modernization (FISMA) Act, security control assessment, authorization decision support, continuous monitoring strategy, vulnerability remediation, and coordinated incident response; AND
• Implementing and maintaining cybersecurity resilience for enterprise systems and technology services to ensure compliance with applicable Federal information security requirements; AND
• Directing agency cybersecurity risk-management activities, including execution of the Risk Management Framework (RMF), authorization processes, security control assessments, continuous monitoring, vulnerability management, and development and tracking of Plans of Action and Milestones (POA&M); AND
• Integrating cybersecurity requirements into enterprise architecture, technology investments, acquisition processes, business workflows, and law-enforcement mission operations. all of the following

Your resume must support your responses to the application questionnaire and the qualification requirements. Failure to do so may result in an ineligible rating. See the Required Documents section for important notes about what must be included in your resume.