Information Systems Security Analyst/Specialist

Telework Eligible

Yes

Major Duties

• Delivers enterprise-level information systems security engineering and cybersecurity risk assessment support and expert guidance on security architecture requirements, system hardening, risk mitigation, and compliance with DoD policies.
• Oversees and performs technical risk assessments on hardware, software, and components to guide risk-related decisions, utilizing tools, expertise, and technical knowledge.
• Collaborates with cross functional teams to integrate security solutions into existing systems and applications.
• Responsible for coordinating, communicating, integrating the overall success of the cybersecurity risk assessment program by ensuring alignment with critical agency priorities.
• Applies creatively to identify technical, policy, and procedural solutions to mitigate risks and ensure compliance while aligning with mission objectives.
• Prepares briefing materials, facilitates engineering and development meetings, coordinates system audits, site assessments, and security testing events.

Qualification Summary

To qualify for an Information Systems Security Analyst/Specialist your resume and supporting documentation must support: A. Specialized Experience: One year of specialized experience that equipped you with the particular competencies to successfully perform the duties of the position and is directly in or related to this position. To qualify at the GS-14 level, applicants must possess one year of specialized experience equivalent to the GS-13 level or equivalent under other pay systems in the Federal service, military, or private sector. Applicants must meet eligibility requirements including time-in-grade (General Schedule (GS) positions only), time-after-competitive appointment, minimum qualifications, and any other regulatory requirements by the cut-off/closing date of the announcement. Creditable specialized experience includes: Measures the effectiveness of system hardening and defense-in-depth architecture against known vulnerabilities. Applies cybersecurity analytical methods and processes to identify and prioritize risks and impacts, proposing mitigations while considering cost, schedule, and mission impact. Performs system audits using a variety of security tools to identify anomalies and vulnerabilities. Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional, philanthropic, religious, spiritual, community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience.