Clarification from the agency

Open to Public

This position is a section supervisor within the Cyber Security and Compliance branch, Information Technology Directorate (MRI), NAF Business and Support Services Division (MR), Manpower and Reserve Affairs Department, Headquarters Marine Corps. Come join a team of professionals in a high energy family-oriented setting serving Marines and their families.

• SUMMARY OF DUTIES:  This position serves as a Cyber Security Validator section lead within the Enterprise Cybersecurity and Compliance Office. Supervise and provide technical direction necessary for the realization of effective and efficient security across enterprise-wide IT network and resources.
• Directly oversee the activities of the Risk Management Framework (RMF) Security Control Validation teams. Apply knowledge of systems, networks, configurations, secure coding, and data flow capabilities to secure business IT programs.
• Monitor and report on efficacy of control compliance and assessment trend patterns and anomalies.
• Responsible for ensuring the confidentiality, integrity, and availability of systems, networks, and data through the control analysis, control testing and inspection, secure coding practice reviews, personnel interview, risk rating information systems through the DoD RMF.
• Responsible for validation and security engineering support for Marine Corps NAFIs.

Conditions of employment

• See Duties and Qualifications

EVALUATIONS:

Qualifications

Bachelors’ Degree in Information Technology or Business related field appropriate to the work of position OR  ten years of experience performing specific tasks for  Independent Verification and Validation (IV&V), security assessments, risk assessments, or cybersecurity (CY): OR an appropriate combination of education and experience that demonstrates possession of knowledge and skill equivalent to that gained in the above, OR appropriate experience that demonstrates that the applicant has acquired the knowledge, skills, and abilities equivalent to that gained in the above.  Must have the skillset to supervisor others in completion of work.

Skill in conducting test events, performing impact/risk assessments, writing test plans, preparing Test & Evaluation reports, running Security Content Automation Protocol (SCAP) content and Security Technical Implementation Guides (STIGS) based tools for benchmark, developing plans and schedules, estimating resource requirements, defining milestones and deliverables, monitoring activities, and evaluating and reporting accomplishments and deficiencies, documenting security compliance related correspondence required by governing authorities and documenting guidance to specified audiences.

Ability to identify systemic security issues based on the analysis of vulnerability and configuration data, translate data and test results into evaluative conclusions, share meaningful insights about the context of an organization’s threat environment that improve its risk management posture, and prepare and present briefings.

Certification as an Information Systems Security Professional (CISSP) is required or equivalent level education and appropriate experience with DoD system security and information assurance (IA) policy and procedures.

As an authorized and privileged user of DoD Information Systems must fulfill the requirement to complete DoD Workforce Improvement Program certification (8570.01-M) as a condition of access within six months of employment. This position has been determined as a cyber security incident responder with level 3 IAT.

This position had been determined as Moderate Risk.  As a condition of employment, the incumbent must be able to obtain and maintain an Access National Agency Check and Inquiries (ANACI/ Tier 3) Secret Clearance to access classified information. Appointment and continued employment is subject to a favorable adjudication of the security investigation. 

Eligible for incremental telework as determined by MR/MF policy.

How you will be evaluated

You will be evaluated for this job based on how well you meet the qualifications above.

Your application/resume and supporting documentation will be used to determine whether you meet the job qualifications listed on this announcement. This vacancy will be filled by the best qualified applicant as determined by the selecting official.