The Office of Information Security (OIS) service line under the Office of Information Technology (OIT) manages the VA's cybersecurity program to protect Veteran data and VA information systems. Delivers enterprise-wide strategy, policy, governance, and network defense through collaboration with VA and OIT. As an IT Specialist (INFOSEC) in OIS, you will have the opportunity to enhance the security posture and resilience of VA's IT systems and data.

Duties

This position is in the Office of Information and Technology Office of Information Security (OIS). Apply security policies to applications that interface with one another, such as Business-to- Business (B2B) applications Apply security policies to meet security objectives of the system Apply service-oriented security architecture principles to meet organization's confidentiality, integrity, and availability requirements Ensure all systems security operations and maintenance activities are properly documented and updated as necessary Ensure that the application of security patches for commercial products integrated into system design meet the timelines dictated by the management authority for the intended operational environment Ensure that cybersecurity-enabled products or other compensating security control technologies reduce identified risk to an acceptable level Implement specific cybersecurity countermeasures for systems and/or applications Perform cybersecurity testing of developed applications and/or systems Perform security reviews, identify gaps in security architecture, and develop a security risk management plan Provide cybersecurity guidance to leadership Provide input to the Risk Management Framework process activities and related documentation (e.g., system lifecycle support plans, concept of operations, operational procedures, and maintenance training materials) Verify and update security documentation reflecting the application/system security design features Position is Non-Bargaining This position is primarily aligned to the following NICE Cybersecurity Workforce Framework work roles: PRIMARY: 461 Systems Security Analyst For more information about these work roles, where they fit within the larger Cyber Workforce, and how they can support your unique career journey, please visit the Cyber Career Pathways tool on the National Initiative for Cybersecurity Careers and Studies website: https://niccs.us-cert.gov/workforce-development/cyber-career-pathways Position Description/PD#: It Specialist (Infosec)/PD18171A Relocation/Recruitment Incentives: Not Authorized Permanent Change of Station (PCS): Not Authorized Financial Disclosure Report: Not Required Travel Required: Occasional travel may be required as needed for this position. Work Schedule: Monday - Friday; Tour of duty will be determined based on organizational needs. Compressed/Flexible: As determined by the Agency Policy Virtual: This is not a Virtual Position Remote: This is not a Virtual position Physical Demands: The work is sedentary. Some work may require walking and standing in conjunction with travel and to attendance at meetings and conferences away from the work site. Some employees may carry light items, such as papers, books, or small parts, or drive a motor vehicle. The work does not require any special physical effort. Working Conditions: The work area is adequately lighted, heated, and ventilated. The work environment involves everyday risks or discomforts that require normal safety precautions. Some employees may occasionally be exposed to uncomfortable conditions in such places as research and production facilities. Promotion Potential: Position is at full grade Designated Drug Testing Position: N/A

Requirements

• You must be a U.S. Citizen to apply for this job
• Selective Service Registration is required for males born after 12/31/1959
• Complete the initial online assessment and USAHire Assessment, if required
• You may be required to serve a probationary period
• Subject to background/security investigation
• Selected applicants will be required to complete an online onboarding process
• To be considered for this position, applicants must complete all required steps in the process.

Qualifications

To qualify for this position, applicants must meet all requirements by the closing date of this announcement, 12/31/2024. You must meet the Minimum Qualification Requirements and Specialized Experience to qualify for this series as described below. Minimum Qualifications Requirements EXPERIENCE: To qualify for this position, you must have information technology-related experience demonstrating all of the four competencies listed below. Ensure that this experience is clearly described in your resume: Attention to Detail - Is thorough when performing work and conscientious about attending to detail. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. -AND- Specialized Experience for GS-13: You must have one year of specialized experience equivalent to at least the next lower grade in the normal line of progression for the occupation in the organization. Specialized experience is experience that has equipped the applicant with the particular competencies/knowledge, skills, and abilities to successfully perform the duties of the position and is typically in or related to the work of the position to be filled. Such experience is typically gained in the IT field or through the performance of work where the primary concern is IT. Specialized experience is defined as: Mastery of, and skill in applying advanced IT and IT security principles, concepts, methods, standards and practices, configuration management, test criteria and methodologies sufficient to test CORE applications for operational and security compliance, research NIST requirements and incorporate them into detailed implementation guides, write reports on test results and test and evaluate user, facilities and Administrations applications. Expert knowledge of a variety of assessment tools, methodologies and procedures and the ability to categorize andprioritize remediation associated with systemic issues. -AND- Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community; student; social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience. Note: A full year of work is considered to be 35-40 hours of work per week. Part-time experience will be credited on the basis of time actually spent in appropriate activities. Applicants wishing to receive credit for such experience must indicate clearly the nature of their duties and responsibilities in each position and the number of hours a week spent in such employment. It is the policy of the VA to not deny employment to those who have faced financial hardships or periods of unemployment.

Education

There is no educational substitution for this position at this grade level.

Contacts

• Address DAS for Information Technology - 103 810 Vermont Ave. NW Washington, DC 20240 US
• Name: Recruitment Team One A
• Phone: 000-000-0000
• Email: [email protected]