IT Cyber Security Specialist; INFOSEC), GS

Announcement Type: TARP - Direct-Hire Authority (DHA)

Position Type: Permanent

USACE Organization: Southwestern Division (SWD) - Little Rock District

Location: Branson, MO

• Provides technical expertise, advice, and oversight regarding all aspects of the Operational Technology Monitoring System (OTMS) and Operational Technology Monitoring Center (OTMC) for the continuous monitoring of control systems. Works closely with USACE ISSMs, ISSO, SAs and other stakeholders as the Cyber Security Information/Event Management System (SIEM) network defense subject matter expert for alert and warning tools, environments, and services. Analyzes tool workload, monitors capacity and performance, diagnoses and resolves alerting problems, develops SIEM backup and recovery procedures.
• Prevents adversary access schemes and/or infiltration of control systems via the use of defensive measures and information collected from a variety of sources to identify, analyze, and report events that occur or might occur within the OT system in order to protect system and assets from threats. Uses authorized network permissions to assess the organization’s security posture and processes, and identifies areas of vulnerability or inadequate security for mitigation and improvement.
• Serves as a senior incident handler for the UCIC through all phases of the incident response process (preparation, identification, containment, eradication, recovery, lessons learned). Monitors, oversees, and mentors USACE incident handlers to ensure compliance with standard operating procedures, existing USACE, Department of Army (DA), and Department of Defense (DoD) policies, and reporting requirements in addition to identifying the root cause of intrusions and monitoring for signs of an advanced adversarial intrusion.

Minimum Experience Requirement: Basic Requirement for IT Cybersecurity Specialist (INFOSEC), GS-2210-13:
One year of specialized experience which includes at least 2 of the 3 following: (1) Monitoring Operational Technology (OT) or Information Technology (IT) networks for anomalies OR (2) Conducting cyber vulnerability analysis to evaluate risks to equipment OR (3) Implementing cybersecurity mitigation strategies to ensure operational continuity. This definition of specialized experience is typical of work performed at the next lower grade/level position in the federal service GS-2210-12.

The specialized experience must include, or be supplemented by, information technology related experience (paid or unpaid experience and/or completion of specific, intensive training, as appropriate) which demonstrates each of the four competencies, as defined:

• Attention to Detail – Is thorough when performing work and conscientious about attending to detail. Examples of IT-related experience demonstrating this competency include: completing thorough and accurate work independently, even in the most difficult or stressful situations; occasionally reviewing work completed by others.
• Customer Service – Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services;
  
  is committed to providing quality products and services. Examples of IT-related experience demonstrating this competency include: resolving routine and non‑routine problems, questions, or complaints; developing and maintaining strong, mutually supportive working relationships with customers; conducting evaluation of support to determine quality of services and customer satisfaction, and recommending procedural changes based on customer need or changes in policy and/or regulation.
• Oral Communication – Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive,…