IT Security Operations Specialist - Level II

IT Security Operations Specialist Level II

Full-Time/Part-Time Full-Time

Description

The IT Security Operations Specialist - Level II provides operational cybersecurity support for the Department of Homeland Security (DHS) Intelligence Enterprise (DHS IE) by performing day-to-day information security operations across multiple functional areas. This position supports Supply Chain Risk Management (SCRM), security incident management, privileged user administration, removable media control, equipment accountability, SCIF security operations, and Identity, Credential, and Access Management (ICAM) services, including Intelligence Community Public Key Infrastructure (IC PKI) and Homeland Secure Data Network (HSDN) token management.

Working closely with Information System Security Officers (ISSOs), Information System Security Managers (ISSMs), system administrators, security operations personnel, and Government stakeholders, the IT Security Operations Specialist ensures compliance with DHS 4300C
, Intelligence Community (IC) security policies, and Federal cybersecurity requirements while maintaining the operational security posture of DHS IE systems and facilities.

• Support daily IT security operations across the DHS Intelligence Enterprise, ensuring compliance with DHS, Intelligence Community, and Federal cybersecurity policies and operational procedures.
• Perform Supply Chain Risk Management (SCRM) activities, including:
  • Pre-Procurement Device (PED) reviews
  • Hardware risk assessments
  • Equipment accountability reviews
  • Supply chain security documentation
• Support IT security incident reporting, tracking, documentation, and escalation in accordance with DHS 4300C, NIST guidance, and Intelligence Community policies.
• Coordinate incident response activities and maintain incident records throughout the incident lifecycle.
• Maintain the enterprise Privileged User database and monitor privileged account compliance.
• Generate weekly, monthly, and quarterly privileged user reports, metrics, and compliance documentation.
• Administer removable media management activities, including:
  • Media registration
  • Accountability tracking
  • Inventory management
  • Compliance reporting
  • Secure media handling procedures
• Perform equipment sanitization and decommissioning activities in accordance with DHS, NIST, and Intelligence Community media sanitization standards.
• Conduct equipment inspections and provide entry and exit control services for all hardware entering or leaving Sensitive Compartmented Information Facilities (SCIFs).
• Support the Data Access Cell (DAC) by administering user accounts, access permissions, and credential management services.
• Manage the complete lifecycle of IC PKI and HSDN tokens, including:
  • Token issuance
  • PIN resets
  • Key recovery
  • Token replacement
  • Token reissuance
  • Token revocation
• Perform face-to-face identity verification of IC PKI subscribers in accordance with Federal Identity, Credential, and Access Management (FICAM) and Intelligence Community requirements.
• Maintain accountability for IC PKI and HSDN tokens using the HSDN Token Tracking System (TTS).
• Prepare and submit monthly IC PKI, HSDN, DAC, and Token Tracking System (TTS) metrics and accountability reports.
• Perform quarterly token inventory audits and reconcile discrepancies.
• Participate in Intelligence Community PKI working groups as the DHS I&A representative and communicate policy updates to program stakeholders.
• Support Government data calls, audits, inspections, and cybersecurity compliance reviews.
• Maintain operational documentation, standard operating procedures (SOPs), and security records related to IT security operations.

• Active Top Secret/Sensitive Compartmented Information (TS/SCI) security clearance.
• Minimum 3-5 years of experience supporting IT security operations, privileged access management, information assurance, cybersecurity operations, or systems administration within a classified Federal Government or Intelligence Community environment.
• Working knowledge of:
  • NIST SP 800-53
  • DHS Sensitive Systems Policy Directive 4300C
  • Intelligence Community security operational requirements
  • Federal Identity, Credential, and Access Management…