INFORMATION TECHNOLOGY SPECIALIST (INFOSEC)

About this role

In order to qualify, you must meet the specialized experience requirements described in the Office of Personnel Management (OPM) Qualification Standards for General Schedule Positions, Information Technology (IT) Management Series 2210 (Alternative A). https://www.opm.gov/policy-data-oversight/classification-qualifications/general-schedule-qualification-standards/2200/information-technology-it-management-series-2210-alternative-a/ SPECIALIZED EXPERIENCE: Applicants must have at least one (1) year of specialized experience at the next lower grade GS-12, or equivalent in other pay systems.

Examples of specialized experience includes experience with advanced cybersecurity principles, concepts, methods, and practices sufficient to analyze, evaluate, and resolve complex cybersecurity issues affecting command information systems, networks, and data resources. FEDERAL TIME-IN-GRADE (TIG) REQUIREMENT FOR GENERAL SCHEDULE (GS) POSITIONS: Merit promotion applicants must meet applicable time-in-grade requirements to be considered eligible.

One year at the GS-12 level is required to meet the time-in-grade requirements for the GS-13 level. TIG applies if you are in a current GS position or held a GS position within the previous 52 weeks. NOTE: Applicants applying as VEOA candidates who are current GS civil service employees or are prior GS civil service employees within the past 52 weeks must also meet time-in-grade requirements. KNOWLEDGE, SKILLS AND ABILITIES (KSAs): Your qualifications will be evaluated on the basis of your level of knowledge, skills, abilities and/or competencies in the following areas: Knowledge of operational and performance characteristics of DoD cyber security, cyber threats/vulnerabilities, cybersecurity, and network security to develop procedures/policies/practices for command use and cyber activities.

Knowledge of risk management processes and requirements per the Risk Management Framework (e.g., methods for assessing and mitigating risks). Knowledge of the organization's enterprise information technology (IT) goals and objectives. Knowledge of laws, regulations, policies, and ethics as they relate to cyber defense, information security and privacy. Knowledge of cybersecurity principles and methods that apply to software development as it relates to DevSecOps and other software applications.