Skip to main content
U.S. flag

IT Cybersecurity Specialist (Direct Hire)

National Aeronautics and Space Administration
Headquarters, NASA
This job announcement has closed

Summary

Serves as a Security Control Assessor (SCA) for the Enterprise Assessment Service (EAS) Team within the Cyber Security and Privacy Division (CSPD) Service Line. You will provide oversight to daily work performed by contractor SCAs, conduct risk management framework assessments, and advise on risk mitigation. As part of the EAS team you will conduct enterprise assessments across NASA, briefing leaders on risk posture, and advising on continuous monitoring and cybersecurity posture improvements.

Overview

Help
Hiring complete
Open date: 10/12/2023
Closed date: 10/16/2023
Location
1 vacancy in the following locations:
Work site options
Telework eligible
Yes—as determined by the agency policy.
Remote job
No
Relocation expenses reimbursed
No
Salary
$69,996 - $133,236 per year

Salary range reflects the lowest and highest potential salaries of the locations. Actual salary range varies by selectee(s) location.

Pay scale & grade
GS 11 - 12
Promotion potential
12
Pay scale and grade determines the salary of the job.
Work schedule
Full-time
Travel Required
Occasional travel - You may be expected to travel for this position.
Appointment type
Permanent
Occupations and job series
Supervisory status
No
Federal service type
This job is in the Competitive Service
Drug test
Yes
Security clearance
Sensitive Compartmented Information
Position sensitivity and risk
Special-Sensitive (SS)/High Risk
Jobs require a background check and some require a security clearance. The type depends on the job.
Background check type
Announcement number
HQ-23-DE-12143124-BP
Control number
753304700

Videos

Duties

Help
  • Duties described below are at the full-performance level. Duties assigned at a lower grade level will be of more limited scope, performed with less independence and limited complexity; duties will be commensurate with the grade of selected employee.
  • Conduct Risk Management Framework (RMF) security control assessment activities resulting in authorization decisions.
  • Review contractor led RMF security control assessments.
  • Provide weekly feedback to Enterprise Assessment Services (EAS) Lead pertaining to all assessment activities performed and overseen.
  • Collaborate with NASA IT system security plan stakeholders in order to address their requirements, identify assessment services continuous improvement opportunities, concerns, and challenges.
  • Participate in EAS meetings across NASA to promote community outreach for the Cybersecurity Enterprise Assessment Service.
  • Analyze current IT security/cybersecurity assessment processes and make recommendations to the EAS Lead on potential areas of improvement.
  • Foster a culture of engagement, diversity, inclusiveness, excellence and innovation. Champion NASA's commitment to Diversity, Equity, Inclusion and Accessibility to create an environment that promotes a commitment to safety, integrity, and teamwork.

Requirements

Help

Conditions of employment

  • This position is open to U.S. citizens, nationals or those who owe allegiance to the U.S.
  • Position subject to pre-employment background security investigation or higher-level clearance. Investigation/Clearance may differ and be required based on the duties/location-NASA Center requirements.
  • You must meet qualifications requirements by the closing date of this announcement.
  • This position may require a one-year probationary period.
  • Financial Disclosure, Drug Testing, and/or the Travel Requirements for this position may differ and be required based on the duty location/NASA Center requirements.
  • Selected applicant(s) must be assigned to a duty location listed on the announcement.

Qualifications

Specialized experience is experience that has equipped you with the particular ability, skill, and knowledge to successfully perform the duties of this position and is typically in or related to this line of work.

You may meet the basic requirements through substitution of education for experience.

To qualify for the GS-11, you must have:

a) One year of directly related specialized experience equivalent to the GS-09 level:

  • Applying National Institute of Standards and Technology (NIST) - Based Risk Management principles, methods and practices to analyze IT systems and identify deficiencies or risks;
  • Participating in or conducting systems security evaluations, assessments audits, or reviews, escalating issues as needed to senior staff/management and proposing corrective actions;
  • Working collaboratively on a team and across functional lines to coordinate and deliver IT security/cybersecurity mission services and solutions to stakeholders.
OR

b) Completed all requirements for a Ph.D. degree or equivalent doctoral degree with (1) a major in computer science, engineering, information science, information systems management, mathematics, operations research, statistics, or technology management OR (2) a major that provided a minimum of 24 semester hours in one or more fields of computer science, engineering, information science, information systems management, mathematics, operations research, statistics, or technology management, and that required the development or adaptation of applications, systems, or networks.

OR

c) Completed 3 full academic years of progressively higher-level graduate education leading to a Ph.D. degree or equivalent doctoral degree with (1) a major in computer science, engineering, information science, information systems management, mathematics, operations research, statistics, or technology management OR (2) a major that provided a minimum of 24 semester hours in one or more of fields of computer science, engineering, information science, information systems management, mathematics, operations research, statistics, or technology management, and that required the development or adaptation of applications, systems, or networks.

To qualify for GS-12, you must have one year of directly related specialized experience equivalent to the GS-11 level:
  • Conducting National Institute of Standards and Technology (NIST) - Based Risk Management Framework security control assessments, identifying corrective actions to mitigate IT security/cybersecurity control deficiencies, documenting assessment results and conducting post-assessment briefings;
  • Providing guidance and support to IT Specialists performing work on NIST-based risk management framework;
  • Performing NIST-Based risk or vulnerability assessments of planned or installed information systems to identify vulnerabilities, risks, or protection of systems related to Cloud, Information Technology systems and networks, Operational Technologies, External Risk Management Framework Assessments, or Internet of Things.
AND

IF you are qualifying based on experience, you MUST also have IT-related experience demonstrating each of the four competencies listed below:
  1. Attention to Detail - Is thorough when performing work and conscientious about attending to detail.
  2. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services.
  3. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately.
  4. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations.
Your resume must include a clear and detailed narrative description, in your own words, of how you meet the required specialized experience. Experience statements copied from a position description, vacancy announcement or other reference material constitutes plagiarism and may result in disqualification and losing consideration for the job.

Education

If you are using education completed in the United States to meet the qualification requirements, your degree must have been awarded from a college or university that is accredited by a recognized accrediting organization. For a list of schools that meet this criteria, go to http://ope.ed.gov/accreditation/.

If you are using education completed in foreign colleges or universities to meet the qualification requirements, you must show that the education credentials have been evaluated by a private organization that specializes in interpretation of foreign education programs. These education credentials must be deemed equivalent to that gained in an accredited U.S. education program; or full credit has been given for the courses at a U.S. accredited college or university. For further information, visit: https://www2.ed.gov/about/offices/list/ous/international/usnei/us/edlite-visitus-forrecog.html.

All degrees must have been received in the year of, or any year subsequent to the original date of accreditation.

Additional information

Additional selections may be made for similar positions across NASA within the local commuting area(s) of the location(s) identified in this announcement. By applying, you agree to have your application shared with interested selecting official(s) within NASA. CTAP/ICTAP will be cleared for any additional selection from this announcement.

If you have special priority selection rights under the Agency Career Transition Assistance Program (CTAP) or the Interagency Career Transition Assistance Program (ICTAP), you must:

- Indicate your eligibility when applying for a position. The questionnaire asks you to identify your ICTAP/CTAP eligibility.
- Meet the minimum qualifications requirements for the position
- Submit proof that you meet the requirements for CTAP/ICTAP as indicated in 'Required Documents'

For additional information about CTAP/ICTAP eligibility, click here - https://www.opm.gov/policy-data-oversight/workforce-restructuring/employee-guide-to-career-transition/#ictap.

Depending on position assignment, position may or may not be in a bargaining unit. To learn more about bargaining units at NASA please click here NASA Unions (Bargaining Units) | NASA.

How you will be evaluated

You will be evaluated for this job based on how well you meet the qualifications above.

Direct Hire Authority: These positions will be filled through the Office of Personnel Management's Direct Hire Authority. Category rating and veterans' preference will not be considered in evaluating applicants. For more information on Direct Hire Authority, please see: OPM Direct Hire Fact Sheet.

Veterans: Under the provisions of Direct Hire Authority, veterans' preference does not apply. However, applicants who are eligible for veterans' preference are encouraged to include that information in their application and submit supporting documentation (i.e. DD-214, or other substantiating documents). For more information please see: Veterans' Preference information on the FedsHireVets website.

You will be evaluated for this position based on how well you meet the qualifications and eligibility requirements listed in this vacancy announcement. To determine your qualifications and referral status, we may review your resume and supporting documentation and compare it against your responses to the vacancy questionnaire. Overstating your qualifications and/or experience in your application materials or application questionnaire may result in your removal from consideration.

You will be assessed on the following competencies:

  • Attention to Detail
  • Customer Service
  • Oral Communication
  • Problem Solving
  • Information Systems Security Certification
  • Information Systems Security
  • Teamwork
NASA considers paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience.

Headquarters, NASA

Explore the Extraordinary
Calling all the innovators, pioneers, visionaries, and adventurers! We are a diverse group of professionals united by a common purpose: to discover and expand knowledge for the benefit of humanity. We're building on our rich legacy by embarking on new and exciting missions, both on Earth and beyond and we're looking for fresh ideas to help us get there. Do you have a passion for exploration? Do you want your work to leave an enduring impact? Join us in a career that can take you farther than you can imagine. At NASA, our work is more than just a profession-it's a lifelong pursuit, a passion, and a chance to change the world. NASA is more than astronauts. We are scientists, engineers, IT specialists, human resources specialists, accountants, writers, technicians and many other kinds of people working together to break barriers to achieve the seemingly impossible.

Explore the extraordinary, every day; explore a career at NASA!

Agency contact information

NASA Shared Services Contact Center
Phone
1-877-677-2123
Fax
1-866-779-6772
Email
nssc-contactcenter@mail.nasa.gov
Address
NASA Headquarters
300 E St SW
Washington, DC 20546
US

Visit our careers page

Learn more about what it's like to work at Headquarters, NASA, what the agency does, and about the types of careers this agency offers.

https://www.youtube.com/embed/mPcoBfQ5j-k

Your session is about to expire!

Your USAJOBS session will expire due to inactivity in 8 minutes. Any unsaved data will be lost if you allow the session to expire. Click the button below to continue your session.