IT Specialist (INFOSEC)

Participate in network and system design to ensure implementation of appropriate systems security policies.

Review the documentation for approved systems that will be submitted as part of the hospital’s Authorization to Operate and ensure the documentation clearly articulates, describes the network configuration and design of the systems.

Assess the Information System Security (ISS) posture of the organization's information technology (IT) environment and implements accepted technical writing measures.

Provide the local organization's medical community with a comprehensive information systems security plan.

Monitor changes to the hospital network architecture and IT resources for continuous evaluation of ISS vulnerabilities and the need for corrective actions and/or process changes.

Report all levels of ISS vulnerabilities in the manner appropriate to the risk involved.

Assist with the development, implementation, and scrutiny of security policies, procedures, software, and hardware items to sustain system accreditation.

Ensure that local MTF systems and networks are operated and maintained in accordance with established policies.

Utilizes various security scanning tools or the most current scanning tools identified for use in the DHA hierarchy to identify vulnerabilities and remediation of vulnerable systems.

Manage, Investigate, and/or coordinate with the Cyber Incident Response team on security related trouble tickets involving actual or attempted intrusion, viruses, worms, Trojan horses, hoaxes, or other incidents that pose a threat to the networks.

Who May Apply: US Citizens In order to qualify, you must meet the education and/or experience requirements described below.

Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community; student; social). You will receive credit for all qualifying experience, including volunteer experience.

Your resume must clearly describe your relevant experience; if qualifying based on education, your transcripts will be required as part of your application. Additional information about transcripts is in this document.

Basic Requirement for IT SPECIALIST (INFOSEC): Specialized Experience: One year of specialized experience which includes: monitoring network operations to prevent unauthorized access to systems, networks, and data; and conducting security vulnerability testing of installed systems to identify system vulnerabilities; and determining hardware and software compliance with security configurations.

This definition of specialized experience is typical of work performed at the next lower grade/level position in the federal service (GS-09).

The specialized experience must include, or be supplemented by, information technology related experience (paid or unpaid experience and/or completion of specific, intensive training, as appropriate) which demonstrates each of the four competencies, as defined: (1) Attention to Detail - Is thorough when performing work and conscientious about attending to detail.

Examples of IT-related experience demonstrating this competency include: completing thorough and accurate work independently, even in the most difficult or stressful situations; occasionally reviewing work completed by others.

(2) Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services.

Examples of IT-related experience demonstrating this competency include: resolving routine and non-routine problems, questions, or complaints; developing and maintaining strong, mutually supportive working relationships with customers; conducting evaluation of support to determine quality of services and customer satisfaction, and recommending procedural changes based on customer need or changes in policy and/or regulation.

(3) Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately.

Examples of IT-related experience demonstrating this competency include: convincingly conveying complex information to customers; presenting thoughts that are well-organized and demonstrating confidence in the facts and ideas; adjusting style when working with individuals with different levels of understanding; using various methods to explain and convey information.

(4) Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations.

Examples of IT-related experience demonstrating this competency include: solving complex or sensitive problems by developing and proposing strategic alternatives; identifying possible conflicts and shared benefits; helping team anticipate problems and identifying and evaluating potential sources of information; providing feedback and coaching to others to help solve problems; engaging appropriate stakeholders when developing solutions in order to understand and incorporate multiple perspectives and needs; evaluating the effectiveness of decisions and adjusting future decisions as appropriate.

OR Education: Ph.D. or equivalent doctoral degree or 3 full years of progressively higher level graduate education leading to such a degree from an accredited or pre-accredited institution in computer science, engineering, information science, information systems management, mathematics, operations research, statistics, or technology management; or, three full years of graduate education from an accredited or pre-accredited institution that provided a minimum of 24 semester hours in one or more of the fields identified above and required the development or adaptation of applications, systems, or networks.