USA remote
Information Technology Specialist (INFOSEC)
About this role
Basic Requirement: Individuals must have IT-related experience demonstrating each of the four competencies listed below. Attention to Detail - Is thorough when performing work and conscientious about attending to detail. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services.
Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations.
You qualify for this position if you meet the basic requirement listed above and possess one year of specialized experience as described below. Experience: You qualify for the GS-14 grade level if you possess 1 year of specialized experience equivalent to at least the next lower grade level, performing duties such as: Utilizing enterprise cybersecurity tools to identify, contain, and mitigate advanced threats and cyber intrusions.
Analyzing technical evidence across the cyber kill chain and MITRE ATT&CK framework. Skilled at correlating forensic artifacts, indicators of compromise, and threat intelligence from network and host systems to identify adversary tactics, techniques, and procedures. Analyzing at senior-level large volumes of cybersecurity logs from multiple sources to identify hidden malicious activity, lateral movement, and unusual behavior that may bypass traditional security controls.