Clarification from the agency

This announcement is open until filled. This is a high-sensitive position within the Judiciary. Employment will be considered provisional pending successful completion of an OPM background investigation and credit check and a favorable suitability determination. Investigative updates are required every five years.

The United States District Court, Bankruptcy Court, and Probation Office for the Western District of New York are seeking qualified applicants for a full-time Information Technology Security Officer. The IT Security Officer performs professional work related to the management of information technology security policy, planning, development, implementation, training, and support for all court units within the district. The incumbent provides actionable advice to improve IT security and serves as a team lead to fulfill security objectives within the district.

Responsibilities

• Review, evaluate, and make recommendations on courts' technology security programs. Promote and support security services available throughout the district.
• Provide technical advisory services to securely design, implement, maintain, or modify information technology systems and networks that are critical to the operation and success of all court units. Provide advice on matters of IT security.
• Assist in the development and maintenance of local court unit security policies and guidance, the remediation of identified risks, and the implementation of security measures. Develop, analyze, and evaluate new and innovative information technology concepts, approaches, methodologies, techniques, services, guidance, and policies.
• Provide security analysis of IT activities to ensure that appropriate security measures are in place and are enforced.
• Oversee the implementation of security on information systems and the generation of security documentation for system authorization and operation. Manage information security projects (or security-related aspects of other IT projects).
• Serve as a liaison with court stakeholders to integrate security into the system development lifecycle.
• Create and employ methodologies, templates, guidelines, checklists, procedures, and other documents to establish repeatable processes across the district's information technology security services. Establish mechanisms to promote awareness and adoption of security best practices.
• Coordinate the court's response to SOC and virus alerts and handle remediation.
• Strive to meet all parameters as defined in the Administrative Office of the U.S. Courts (AO) mandated IT Security Scorecard, and consistently work towards continuous improvement in the Court's IT security posture.
• Monitor and respond to day-to-day Help Desk activity, log computer problems, and troubleshoot and repair system issues. Provide information and assistance to end users on applications and software. Maintain high satisfaction (both internal and external) through successful and timely resolution of technical problems.
• Maintain and support the court's local area networks (LAN), wide area networks (WAN), wireless technology (WiFi), and virtual network infrastructure (VLAN) technology.
• Perform other duties as assigned.

Conditions of employment

Employees must adhere to a Code of Conduct. The Court provides reasonable accommodations to applicants with disabilities. Veterans' preference is not a factor used in Judicial Branch appointments. Applicants must be U.S. citizens or lawful permanent residents seeking U.S. citizenship. Positions with the U.S. Courts are excepted service appointments, which are "At-Will" and may be terminated with or without cause. Employees are required to use electronic funds transfer for payroll deposit.

Qualifications

Qualification Requirements/Court Skills

• At least two years of professional IT security experience.
• A bachelor's degree or higher, from an accredited institution, in an IT or IT-related major.
• Certified Information Systems Security Professional (CISSP), Certified Information Security Management (CISM), CompTIA Security+, or similar certification is preferred.
• Thorough knowledge of network management and security, network traffic analysis, computer hardware and software, and data communications.
• Understanding of applicable programming languages, such as Python, Java, PHP, and SQL.
• Ability to identify and analyze security risks and to implement resolutions. Knowledge of anti-virus, anti-malware, application control, web threat protection and endpoint security controls. Knowledge of IPSec and the ability to use it to protect data, voice, and video traffic.
• Understanding of incident response, including the ability to implement a plan and procedures.
• Ability to work with and influence multiple court locations within the district. Strong skill in interpersonal communications.
• Skill in project management, organizing information, managing time and multiple work assignments effectively, including prioritizing and meeting tight deadlines.

How you will be evaluated

You will be evaluated for this job based on how well you meet the qualifications above.

Please read the "Next steps" section for more information.