IT SPECIALIST (INFOSEC/NETWORK) - ALTERNATE HIRING AUTHORITY

Summary

Click on "Learn more about this agency" button below for IMPORTANT additional information. The primary purpose of this position is to Serves as Air Force (AF) Sensitive Compartmented Information (AFSCI) Site Information Systems Security Manager for the Air Force Life Cycle Management Center (AFLCMC), Intelligence Directorate. Manages, maintains, and assesses cybersecurity requirements for all classified/unclassified information systems within AFLCMC SCI facilities managed at the installation.

Duties

• - Plans, develops, implements, and maintains the AFLCMC/IN Enterprise Sensitive Compartmented Information (SCI) Cyber Security program at theinstallation. - Implements and manages the AFLCMC Enterprise SCI Information System A&A Program at the installation pursuant to the Risk Management Framework (RMF) per Intelligence Community Directive (ICD) 503, National Institute of Standards and Technology (NIST) Special Publications, and other regulations and policies. - Implements and advises on cybersecurity policies and procedures to ensure protection of internal organizational, organization interfaces to Wide-Area Networks (WANs), and other communication modes required for simulation and analysis execution. -Provides Communication Security (COMSEC) Cryptographic support and accountability for AFLCMC intelligence and SCI mission systems at theinstallation.

Qualifications

In order to qualify, you must meet the quality experience requirements described in the Office of Personnel Management (OPM) Competency-Based Qualification Standards, Information Technology Management Series, 2210. BASIC REQUIREMENT OR INDIVIDUAL OCCUPATIONAL REQUIREMENT: For all positions individuals must have experience demonstrating each of the following competencies listed below:- Attention to Detail, Customer Service, Decision Making, Information Management, Interpersonal Skills, Oral Communication, Problem Solving, Teamwork and Technical Competence.In addition to meeting the basic requirement above, to qualify for this position you must also meet the qualification requirements listed below: EXPERIENCE REQUIRED: Your resume must reflect the quality level of experience which demonstrates the possession of the knowledge, skills, abilities, and competencies necessary for successful job performance required for this position. Examples of creditable experience include: Leading and managing a comprehensive enterprise-level cybersecurity program; developing, directing, and enforcing network security architectures and policies to ensure the confidentiality, integrity, and availability of interconnected systems; applying risk management processes to assess program-level risk; and/or synthesizing threat intelligence and vulnerability data to oversee penetration testing and develop proactive mitigation strategies against emerging cyber threats. KNOWLEDGE, SKILLS AND ABILITIES (KSAs): Your qualifications will be evaluated on the basis of your level of knowledge, skills, abilities and/or competencies in the following areas: 1. In-depth knowledge of Cybersecurity and Risk Management Principles: Knowledge of cybersecurity principles, risk management processes, and network security architecture. Ability to serve as the organization's authoritative source on security matters, applying this knowledge to make strategic, risk-based decisions and provide guidance to senior leadership on complex issues affecting national security systems. 2. Skill in Enterprise Security Program Leadership: Skill in creating, directing, and enforcing enterprise-level cybersecurity policies and strategies. Ability to lead and manage a comprehensive security program, discerning the protection needs of interconnected systems and ensuring the confidentiality, integrity, and availability of information across the enterprise. 3. Knowledge of the Threat Environment and System Vulnerabilities: In-depth knowledge of current and emerging cyber threats, attack vectors, and system vulnerabilities. Ability to synthesize threat intelligence and technical data to conduct penetration tests, assess program-level risk, and develop proactive mitigation strategies for an enterprise environment. 4. Skill in Conducting IT Audits and Security Control Assessments: Skill in independent planning and conducting technical audits, reviews, and security control assessments of information systems. Ability to analyze system performance indicators and evaluate the effectiveness of implemented controls against Risk Management Framework (RMF) requirements and industry best practices. 5. Ability to Analyze Evidence and Report Findings: Ability to collect, analyze, and evaluate technical evidence to determine system compliance and trustworthiness. Skill in preparing and reviewing formal audit reports, ensuring findings are accurate, well-documented, and contain actionable recommendations for corrective action. Ideal Candidate: An ideal candidate's resume for the Air Force ISSM position would showcase extensive experience in cybersecurity program leadership, particularly within Sensitive Compartmented Information (SCI) environments. The resume should highlight expert-level knowledge of the Risk Management Framework (RMF), evidenced by successful system accreditations and the management of Assessment and Authorization (A&A) packages using tools like Xacta, eMASS, etc. It would detail a strong backg…

Education

IF USING EDUCATION TO QUALIFY: If position has a positive degree requirement or education forms the basis for qualifications, you MUST submit transcripts with the application. Official transcripts are not required at the time of application; however, if position has a positive degree requirement, qualifying based on education alone or in combination with experience, transcripts must be verified prior to appointment. An accrediting institution recognized by the U.S. Department of Education must accredit education. Click here to check accreditation. FOREIGN EDUCATION: Education completed in foreign colleges or universities may be used to meet the requirements. You must show proof the education credentials have been deemed to be at least equivalent to that gained in conventional U.S. education program. It is your responsibility to provide such evidence when applying.