Sr. IT Specialist Information Security InfoSec

Job Description

Company: The Supreme Court of the United States

Location: Washington, US

Duties

This position is located at the Supreme Court of the United States in the Office of the Information Technology (OIT). OIT provides automated information systems and access to those systems for the Supreme Court of the United States. The Senior IT Specialist (InfoSec) works under the guidance of a senior staff and will perform the full range of tasks and activities involved in developing, coordinating, implementing and maintaining standards, procedures and technical solutions to protect the confidentiality, integrity and availability of information systems and data.

The InfoSec serves as the primary security advisor and accountable official for one or more Court information systems. The InfoSec ensures that assigned systems maintain an acceptable level of risk and operate in full compliance with Court information security policies and standards. The role requires technical cybersecurity expertise and security governance acumen to apply complex policy requirements into practical, effective protections across diverse Court technology environments.

As a condition of continued employment, the candidate must be able to acquire and retain a Top Secret (TS) clearance.

This is a full-time onsite position located in Washington, DC with partial telework option after a probation period and at the discretion of the hiring manager.

Applications must be received on USAJOBS – Job Announcement

Qualifications

At least two years of experience as an Information Systems Security Officer or Security Control Assessor, and at least two additional years of applicable Information Technology or Information Security experience.
• Knowledge and experience implementing industry cybersecurity frameworks and concepts, such as, Risk Management Framework, DISA STIGs, CIS Benchmarks. ISO 27001, ATT&CK framework, ISO/IEC 15026-2. Knowledge of network protocols (TCP/IP), common application protocols and port. Experience developing, managing, and implementing contingency plans.
• Experience in asset management and configuration management.
• Experience with protecting Personally Identifiable Information (PII).
• Ability to develop, implement, and maintain Information System ATO package artifacts. to include System Security Plans (SSP), Security Assessment Reports (SAR), Plans of Action & Milestones (POA&M), Risk Assessment Reports (RAR), Configuration Management Plans, Contingency Plans, and Privacy Impact Assessments (PIA).
• Knowledge of information technology (IT) security principles and methods (e.g., firewalls, demilitarized zones, encryption).
• Strong communication skills, oral and written skills with the ability to create, manage, and prioritize tasks.
• High level of understanding operating systems, such as, Windows, Linux/Unix and command-line tools are desired but not required.

Source: LinkedIn