IT SPECIALIST (INFOSEC)

Summary

THIS IS A NATIONAL GUARD TITLE 5 EXCEPTED SERVICE POSITION. This National Guard position is for a IT SPECIALIST (INFOSEC), Position Description Number T58212P1 and is part of the ME 101st Communications Squadron, National Guard.

Duties

Manages the COMSEC account for the Wing/Base and subordinate units. Ensures that the COMSEC Responsible Officer's (CRO's), Secure Telephone Unit (STUIII) Voice Responsible Officer's(SRO's) (SVRO's), and FORTEZZA Responsible Officers (FRO's), comply with Air Force, National Guard, state, Federal laws and applicable regulations. Act as the sole point of contact to the wing commander concerning the Wing COMSEC posture. Provide guidance to unit commanders, CRO's, SRO's SVRO's, FRO's, and COMSEC users. Establish training programs for CRO's, SRO's, and SVRO's, FRO's and alternates. Report deviations from established COMSEC and Security guidelines to higher headquarters. Assure semi-annual functional reviews of all COMSEC users' accounts are performed. Manages the AFEKMS program for the Wing/Base. Initializes the system, performs system backups, determines operator access and control functions (privilege management), reloads and configures the operating system's parameters. Installs hardware and software and trains alternate(s) in the AFEKMS operations. Provides Data Transfer Device (DTD) Modern Key transfer device training to assigned CROs. Prepares Emergency Action Plans (EAP's) Operating instruction to ensure that the EAPs can be implemented immediately. Itemizes procedures on task cards that are necessary while simultaneously preventing compromise of COMSEC material. Conducts and documents semi-annual dry runs involving all personnel associated with the COMSEC account.2. Serves as the Base Computer Security (COMPUSEC) Manager. Establishes and publishes base-wide policy, as required, to effectively manage the Wing/Base COMPUSEC programs. Serves as Wing/Base Information Systems Security Manager (ISSM). Assists all Wing/Base organizations in the development of their individual COMPUSEC program. Manages, provides guidance and assists in the preparations of all certification and accreditation packages in accordance with prescribing directives. Makes recommendations to the Designated Approval Authority (DAA). Uses state of the art information security software and hardware tools to gather information and manage security on assigned telecommunication networks and in the Wing/Base "firewall" or "Barrier Reef" software and hardware. Analyzes the information gathered to determine vulnerabilities, threats, and detect any compromises. Utilizes approved software to ensure Ensures user password configuration and use meets current standards. May be required to assist investigating agency on cases of sensitive matters. Manage the Information Protection Assurance Assessment & Assistance Program (IPAAP)(IAAP) for the wing, tenants, and GSUs. Work with the Network Control Center (NCC), and the Regional Operations Security Control center (ROSC), to implement procedures to protect information on all networks managed by the NCC. Performs IPAAP IAAP assessments, per prescribing directives, of all wing units and assigned GSUs.3. Manages, develops, and conducts the base computer Security Awareness Training and Education Information Assurance Awareness Program. Maintain master records of SATE Information Assurance Awareness training for the Wing and supported GSU's, providing statistical data to command authorities as required. Serves as the Telecommunications Monitoring and Assessment Program(TMAP) Manager. Evaluates, advises, and trains agencies organizations and users throughout the entire Wing on TMAP requirements. Manages the Base Emissions Security (EMSEC) program. Assists computer systems users on all matters concerning Emissions Security. Performs EMSEC inspections and certifies areas/systems as appropriate. Complies with EMSEC directives and submits reports to appropriate MAJCOM. Conducts EMSEC customer education. Establishes, maintains, and exercises Information Condition (INFOCON) adjustment plans and procedures, to ensure mission critical systems capabilities are maintained, and sustained. Responds to downward directed and local INFOCON change requirements. Advises local Command authorities of the necessities for local INFOCON changes, based on situation. Serves as the central focal point for all Time Compliance Network Orders (TCNO) system vulnerability alerts. Ensures Network Control Center, local functional system administrators (FSA's), Client Support Administrators (CSA's) and users, install all security patches comply with security procedures, and identified vulnerabilities are corrected. Reports compliance status to higher headquarters within mandated time frames. Assists users in determining equipment requirements to prescreen and determine if proposed system meets current COMPUSEC needs of the user requirements, to include future expansion, and comply with the AF computer security standards. Performs other duties as assigned. Qualifications

GENERAL EXPERIENCE: Experience, education or training that has provided a basic knowledge of data processing functions and general management principles that enabled the applicant to understand the stages required to automate a work process. Experience may have been gained in work such as computer operator or assistant, computer sales representative, program analyst, or other positions that required the use or adaptation of computer programs and systems. SPECIALIZED EXPERIENCE: Must have at least 36 months experience, education, or training that approaches techniques and requirements appropriate to an assigned computer applications area or computer specialty area in an organization. Experience planning the sequence of actions necessary to accomplish the assignment where this entailed coordination with others outside the organizational unit and development of project controls. Experience that required adaptations of guidelines or precedents to meet the needs of the assignment. Experience preparing documentation on cost/benefit studies where is involved summarizing the material and organizing it in a logical fashion.

Education

If you are using Education to qualify for this position, You must provide transcripts or other documentation to support your Educational claims. To receive credit for Education, you must provide documentation of proof that you meet the Education requirements for this position. How You Will Be Evaluated

Once the announcement has closed, your resume and supporting documentation will be used to determine if you meet the qualifications listed on this announcement. If you are minimally qualified, your resume and supporting documentation will be compared to your responses on the assessment questionnaire to determine your level of experience. If you rate yourself higher than is supported by your application package, your responses may be adjusted and/or you may be excluded from consideration for this position. If you are found to be among the top qualified candidates, you will be referred to the selecting official for employment consideration. Your qualifications will be evaluated on the following competencies (knowledge, skills, abilities and other characteristics): -- Knowledge of a full range of IT security principles, methods, regulations, policies, products, and services sufficient to develop specifications to ensure compliance with security requirements at the LAN level and to plan and coordinate the delivery of an IT security awareness training program for end users at all levels at the installation. -- Knowledge of a wide range of IT and communication computer security techniques, requirements, methods, sources, and procedures in COMSEC, INFOSEC, KMI, EMSEC, and secure voice (e.g., STE, Secure VoIP) Automated Software security. -- Skill to develop and evaluate program documentation to include mission needs statements, operational requirements documents and support plans, specifications, proposals, and plans for systems operational test and evaluation of communications and information security systems. -- Ability to serve as the focal point for information security, providing authoritative advice and assistance on complex, technical, controversial, and precedent setting matters to improve the IT security program comprising many unique organizations and large, complex computer and communications security systems. -- Ability to apply sound judgment in the use of security knowledge and in weighing the impact of variables such as granting access to classified keying material and other issues that influence the course of actions taken in resolving security questions or issues. Other Information

If you are a male applicant who was born after 12/31/1959 and are required to register under the Military Selective Service Act, the Defense Authorization Act of 1986 requires that you be registered or you are not eligible for appointment in this agency (Register | Selective Service System : Selective Service System (sss.gov)).