IT CYBERSECURITY SPECIALIST (INFOSEC)

Summary

THIS IS A NATIONAL GUARD TITLE 32 EXCEPTED SERVICE POSITION. This National Guard position is for an IT Cybersecurity Specialist, Position Description Number D2486P01 and is part of the Information Management /J6 of the Vermont Army National Guard. *This position is also advertised as a Title 5 vacancy under VT-12997719-AR-26-40 https://www.usajobs.gov/GetJob/ViewDetails/876590200

Duties

• This is a National Guard Dual Status Technician position requiring military membership. The primary purpose of this position is to provide expertise in cybersecurity policy and process development; conducting audits to validate compliance; responsible for the risk management framework and ensures systems are operated and maintained IAW AR 25-2 and all applicable command, DA, JS and DOD security directives and procedures. MAJOR DUTIES: 1) Serves as an Information Technology Specialist providing Cybersecurity for a state National Guard headquarters. Operates within the DoD and Army security procedures, operations, and practices. Ensures systems are operated and maintained IAW AR 25-2 and all applicable command, DA, JS and DOD security directives and procedures. Monitors Microsoft and DoD information security bulletins and notifications as they relate to Information Security Vulnerability Alerts (ISVAs). Coordination is required with peer state contacts, FORSCOM and MACOM elements and commercial vendors. Incumbent is required to ensure compliance with Federal, DoD and DA Information Assurance/Cyber Security policies. Utilizes extensive knowledge of all areas of automation security to establish operating standards and procedures for the installation Information Assurance Program. Coordinates requirements with the responsible personnel and tracks suspense for completing required actions and reports virus problems in accordance with established procedures. Ensures the confidentiality, integrity and availability of systems and networks by planning, analyzing, developing, and implementing information systems security programs, policies, procedures, and tools. The incumbent serves as a subject matter expert (SME) in advising, posturing, preparing and auditing the organization for No Notice Army Cyber Readiness Assessments (NACRA), Organizational Inspection Program (OIP), and accreditations. May serve in a team lead role for auditing/assessment teams, such as a Site Assistance Visit (SAV). 2. Coordinates with Program Information System Security Managers and Organizational Information System Security Officer at other locations to verify or clarify information pertinent to cybersecurity/ Information Assurance procedures. Ensures all IS and COTS/GOTS within the DODIN­A (NG) Enclave are properly certified and accredited in accordance with, Risk Management Framework (RMF), and configuration management policies and practices prior to installing devices/systems on the production ICAN. The incumbent has program oversight responsibility for the Installation Campus Area Network (ICAN)/Local Area Network (LAN) Certification and Accreditation (C&A), documentation and meets AR 25-1, AR 25-2, DoDI 8500.01 (Cybersecurity) and DoDI 8510.01 (Risk Management Framework (RMF) for DoD Information Technology) and DoDI 8500.2 Information Security (IS) Implementation. Ensures all aspects of the RMF are implemented for all assets connected, or to be added, to the ICAN are accepted and approved by the appropriate Designated Approving Authorities (DAAs) for RMF Assess Only process and Configuration Management Board. 3. Maintains an operational knowledge base of past, current and possible future threats to the security posture by attending courses, conferences, seminars, online research, and information sharing between other Cyber Security/Information Assurance professionals. Using this knowledge base, the incumbent will be able to devise and implement new policies and procedures to prevent or react to security concerns. **Performs other duties as assigned**

Education

Substitution of Education for Specialized Experience is allowed. 1) Qualifying based on education alone: Education may be substituted for specialized experience with a Ph.D or equivalent doctoral degree OR 3 full years of progressively higher level graduate education leading to such Ph.D. or equivalent doctoral degree in computer science, engineering, information science, information systems management, mathematics, operations research, statistics, or technology management or a degree that provided a minimum of 24 semester hours in one of more of the identified above fields identified above and required the development or adaptation of applications, systems or networks. NOTE: In order to qualify for this position using education, you must submit a copy of your transcripts. FOREIGN EDUCATION: If you are using education completed in foreign colleges or universities to meet the qualification requirements, you must show the education credentials have been evaluated by a private organization that specializes in interpretation of foreign education programs and such education has been deemed equivalent to that gained in an accredited U.S. education program; or full credit has been given for the courses at a U.S. accredited college or university. For further information, visit: http://www.ed.gov/about/offices/list/ous/international/usnei/us/edlite-visitus-forrecog.html.