RISK MANAGEMENT & CYBERSECURITY SPECIALIST- ALTERNATE HIRING AUTHORITY

Click on "Learn more about this agency" button below for IMPORTANT additional information.

The primary purpose of this position is to serve as a Cybersecurity Specialist, responsible for designing and assessing the security architecture of Air Force systems within the Air Force Intelligence Community (IC).This role involves performing in-depth security architecture reviews for AF IC Cross Domain Solutions (CDS) IF USING EDUCATION TO QUALIFY: If position has a positive degree requirement or education forms the basis for qualifications, you MUST submit transcriptswith the application. Official transcripts are not required at the time of application; however, if position has a positive degree requirement, qualifying based on education alone or in combination with experience, transcripts must be verified prior to appointment. An accrediting institution recognized by the U.S. Department of Education must accredit education. Click here to check accreditation.

FOREIGN EDUCATION: Education completed in foreign colleges or universities may be used to meet the requirements. You must show proof the education credentials have been deemed to be at least equivalent to that gained in conventional U.S. education program. It is your responsibility to provide such evidence when applying.

• Performs cybersecurity analysis for the administration of the Air Force Materiel Command's (AFMC) ISR Cybersecurity Program.
• Performs detailed security control reviews and authorization activities for foundational security protections on CDSs, TS/SCI weapon systems, ISR airframes, and base infrastructure.
• Guides the development and remediation of Plans of Action and Milestones to address identified security architecture vulnerabilities and areas of non-compliance with AF IC, ODNI, NSM8, and other directives.
• Provides authoritative technical expertise and recommendations on cybersecurity risk management and security system authorization decisions, analyzing and recommending risk acceptance for systems requiring exceptions by evaluating mission impact versus architectural cybersecurity risk.

In order to qualify, you must meet the General experience requirements described in the Office of Personnel Management (OPM) Qualification Standards for General Schedule Positions, Competency-Based Qualification Standard for the Information Technology Management Series

BASIC REQUIREMENT OR INDIVIDUAL OCCUPATIONAL REQUIREMENT:
For positions at the GG-12, GG-13, GG-14, or GG-15 grade levels, applicants may qualify by meeting or exceeding the minimum proficiency level established for each of the required competencies, in addition to meeting the specialized experience requirement as demonstrated through the assessment of skills identified through the agency job analysis. There may be instances where applicants do not fully meet the competency requirements outlined in this standard but are nonetheless demonstrably well qualified to perform the work. Agencies should exercise judgment in applying these standards, as they have flexibility to qualify an applicant with a deficit in one area if that deficit is offset by strengths in other areas identified through the job analysis. Any rationale for such deviations must be thoroughly documented.

In addition to meeting the basic requirement above, to qualify for this position you must also meet the qualification requirements listed below:


EXPERIENCE REQUIRED: Your resume must reflect the quality level of experience which demonstrates the possession of the knowledge, skills, abilities, and competencies necessary for successful job performance required for this position. Examples of creditable experience include: Attention to Detail , Customer Service, Oral Communication, and Problem Solving skills with the quality level experience which demonstrates the possession of the knowledge, skills, abilities and competencies necessary for successful job performance required for this position. Quality experience is experience that has equipped the applicant with the particular competencies/knowledge, skills, and abilities to successfully perform the duties of the position and is typically in or related to the work of the position to be filled. Examples of creditable experience include: knowledge of a wide range of cybersecurity concepts, principles, and practices; knowledge of risk management framework, and network security architecture design concepts such as defense-in-depth, zero trust, and multi-level security; and the ability to apply information security program management principles to the system architecture.

Note: Creditable experience may include previous military experience, experience gained in the private sector, or experience gained in another government agency.

KNOWLEDGE, SKILLS AND ABILITIES (KSAs): Your qualifications will be evaluated on the basis of your level of knowledge, skills, abilities and/or competencies in the following areas:

1. Extensive and demonstrative knowledge of risk management processes and requirements in alignment with Risk Management Framework (RMF), and organizational risk management directly related to the display, discussion, processing, storage, and connectivity of classified data.
2. Expert knowledge of network security architecture design concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth, Zero Trust, cross domain solutions/multi-level security, data-centric security) relative to the enterprise information technology (IT) goals and objectives.
3. Demonstrated ability to apply information security program management principles to the system architecture lifecycle principles, policies, and guidelines.
4. Expert knowledge of incident response and handling methodologies.
5. Deep understanding of, and ability to communicate, system and software life cycle management security principles, including secure design and development.
6. Ability to communicate effectively, both orally and in writing, to produce Senior-level technical reports and/or briefings for multiple forums and audiences and ability to make decisions independently in a self-directed manner in support of a team and/or organizational goals.
7. Ability to work independently to plan, organize, and carry out complex assignments, manage competing priorities, and meet deadlines within a dynamic environment.

Ideal Candidate: The ideal candidate for this role is a self-directed and highly motivated professional with a deep understanding of security architecture, design, and system authorization processes mandated by the DoD and Intelligence Community. This individual will possess the ability to work independently to plan, organize, and carry out complex assignments in a dynamic environment with competing priorities. The ideal candidate will have expert-level knowledge to analyze and resolve complex cybersecurity issues for National Security Systems and will be resourceful in interpreting and applying broad and often vague guidelines to unique and technologically advanced architectures. Exceptional oral and written communication skills are crucial, as is the ability to produce senior-level technical reports and brief multiple audiences. An advanced cybersecurityrelated or professional degree is highly desirable.


PART-TIME OR UNPAID EXPERIENCE: Credit will be given for appropriate unpaid and or part-time work. You must clearly identify the duties and responsibilities in each position held and the total number of hours per week.

VOLUNTEER WORK EXPERIENCE: Refers to paid and unpaid experience, including volunteer work done through National Service Programs (i.e., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community; student and social). Volunteer work helps build critical competencies, knowledge and skills that can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience.