This position is located in DoDDS-Europe, Information Technology (IT) Division, InformationAssurance Branch. Incumbent responsible for the confidentiality, integrity, and availability ofsystems, networks, and data through the planning, analysis, development, implementation,maintenance, and enhancement of information systems security programs, procedures, andtools for the business and educational requirements.
Troubleshoots security issues for all aspects of information technology (hardware, software,networks, and telecommunications). Conducts in-depth security analyses of existing systemsand system components for new and/or enhanced security programs. Develops detailedintegrated security strategies, specifies milestones, appropriate data formats, systemsinterface plans, detailed system layouts and test plans.
Studies new equipment and software performance data to develop and/or modify test plans, conduct tests and analyze test results to develop or design equipment to meet security requirements. Maintains or restores operations, while safeguarding evidence for possible use in criminal or administrative actions.
Performs traffic analysis criteria for varied regional networks and/or interagency system that are frequently expanding or being modified in order to mitigate risks; e.g., installing security patches running anti-virus or other utilities. Develops reporting requirements and procedures and data analysis techniques that will allow for traffic/data planning and evaluation of
operational efficiency. Functions as technical specialist for risk management, security, and contingency planning for local area network (LAN) infrastructure, servers and workstation in assigned areas.
Conducts risk and vulnerability assessments to identify vulnerabilities, risks, and protection needs. Maintains an accreditation database and initiates re-accreditation when securityimpacting changes have occurred. Maintains required Information Assurance documentation and reports for the assigned area and keeps Branch Chief informed. Works with senior specialists to provide advice and assistance in connection with one or more specific technologies associated with computer and network security operations, such as: UNIX security features, Microsoft Window security features, router and firewall features, intrusion detection systems, and World Wide Web security to protect information assets. Provides advice, guidance, and recommendations for operational and technical requirements used to document the Defense Information Technology Security Certificate and Accreditation Process (DITSCSAP) and to ensure IT security tools, procedures and practices are in compliance with DoD directives. Plans and conducts security accreditation reviews and makes recommendations on security measures and countermeasures. Provides training, consultation, and technical support services to field support staff on IT matters related to Information Assurance.