Information Technology Specialist (Security) - DIRECT HIRE - MP

Summary

The Federal Highway Administration (FHWA) is seeking a highly qualified and motivated Information Technology (IT) Specialist to serve as a Cybersecurity Compliance Analyst to implement and advise on the IT cybersecurity program for all FHWA offices and locations. Specifically, the candidate ensures that applicable IT cybersecurity policies are implemented for FHWA information systems/applications, and maintain the operational security posture consistent with current security policy.

Duties

The Information Technology Specialist (Security) will:

• Coordinate, review, and evaluate the cybersecurity compliance of FHWA's cybersecurity program by implementing cybersecurity in the system engineering process, including Risk Management Framework (RMF) task(s) in accordance with National Institute of Standards and Technology (NIST) Special Publication 800-37, cybersecurity assessments and other audit requests, Information System Continuous Monitoring (ISCM), contingency planning, incident handling, risk analysis and mitigation, IT security baseline compliance, and cybersecurity (Role-based and Awareness) training, complying interpreting and applying DOT policy, guidelines, and NIST standards. Identifies the need for changes based on new security technologies or threats.
• Evaluate and advise system owners, information owners, and the Information System Security Manager (ISSM) in recording all known security weaknesses in the Plans of Action and Milestones (POA&Ms) in accordance with DOT policy, guidelines, and procedures. This includes devising solutions and developing draft POA&Ms for observed control level deficiencies or gaps in control implementation(s) in accordance with DOT policy, guidelines, and procedures; and conducts quality assurance reviews of existing POA&Ms to ensure completeness, accuracy, and identified solutions are cost effective.
• Develop and collect information for effective performance measures and metrics by ensuring the Governance Risk and Compliance (GRC) tool accurately contains required information and supporting artifacts.
• Develop/update FIPS 199 Security Categorization documentation; ensure information types and special considerations (if applicable) are defined and documented; update System Security Plans (SSP), ensure discovered and identified system components and control implementation status are addressed.
• Implement and evaluate the information system contingency planning process in accordance with interpreting NIST SP 800-34 Revision 1; ensure contingency plan test exercise results are documented in an after-action report; lessons learned, and corrective actions are developed and updated in the Information Systems Contingency Plan (ISCP); and provide draft update contingency plans including Business Impact Analysis (BIA).
• Implement FHWA's System Development LifeCycle (SDLC) by maintaining architecture diagrams, processes, and standard operation procedures, and ensure the integration and management of static code vulnerability detection.

The ideal candidate for this position is a cybersecurity specialist with extensive experience performing technical cybersecurity functions/duties for software applications/systems. He/she is highly analytical, possesses strong communications skills and has a proven track record of balancing business needs with security requirements. A comprehensive working knowledge of federal laws, Executive Orders, regulations, policies, and guidelines pertaining to IT security in the federal government is essential.

Requirements

Conditions of Employment

• You must be a U.S.Citizen and eligible for consideration.
• Required documents must be submitted by the closing date.
• Submit application and resume online by 11:59 PM EST on the closing date.

CONDITIONS OF EMPLOYMENT:

• SELECTIVE SERVICE: Males born after 12/31/1959 must be registered for the Selective Service.
• POSITION SENSITIVITY AND RISK: Varies by position and will be based on the position to which appointed.
• SECURITY CLEARANCE: Varies by position. If applicable, you must be able to obtain and maintain the appropriate security clearance of the position to which appointed.
• BACKGROUND INVESTIGATION: You may be required to complete a background/security investigation and meet preliminary requirements prior to onboarding.
• PCS/RELOCATION/RECRUITMENT: Permanent Change of Station (PCS), Relocation, and Recruitment Incentive authorization varies by position/selection.
• PROBATIONARY PERIOD: Varies by position and is determined by the hiring agency. If selected, a one-year or two-year probationary period may be required.
• FOR DIRECT HIRE CANDIDATES: You must complete a one-year probationary period (unless already completed).
• FOR GOVERNMENT CANDIDATES: Federal applicants must have served 52 weeks at the next lower grade in the competitive or excepted service in the executive branch to satisfy time-in-grade restrictions contained in 5 CFR 300, Subpart F.

Qualifications

To meet the minimum qualifications for this position, you must meet either the education or specialized experience requirements for the grade at which you are requesting consideration.

To qualify for the GS-11 on Experience, you must have at least one year of experience equal or equivalent to the GS-09 it must include:

• Experience assisting with the gathering and analyzing of data to identify areas of opportunity, risks, and/or issues and proposing recommendations/viable solutions using evaluative and analytical techniques.
• Experience applying and interpreting current IT security technologies, principles, methods, regulations, policies, operations, techniques, and/or standards in order to plan and coordinate the delivery of an IT cybersecurity program for end users at all levels in the organization.

To qualify for the GS-11 on Education alone, you must have:

• 3 years of progressively higher level graduate education leading to a Ph.D. degree or Ph.D. or equivalent doctoral degree.

You can also qualify based on a combination of higher level graduate education and experience. This must be fully supported by your resume and transcripts, provided with your application.

To qualify for the GS-12 on Experience, you must have at least one year of experience equal or equivalent to the GS-11 it must include:

• Experience gathering and analyzing data to identify areas of opportunity, risks, and/or issues and proposing recommendations/viable solutions using evaluative and analytical techniques.
• Experience applying, interpreting, and adapting current IT security technologies, principles, methods, regulations, policies, operations, techniques, and/or standards in order to plan and coordinate the delivery of an IT cybersecurity program for end users at all levels in the organization.

You cannot qualify on education at the GS-12 level; you must have experience.

To qualify for the GS-13 on Experience, you must have at least one year of experience equal or equivalent to the GS-12 it must include:

• Experience gathering and analyzing data to identify areas of opportunity, risks, and/or issues and proposing recommendations/viable solutions using evaluative and analytical techniques.
• Experience applying, interpreting, and adapting current IT security technologies, principles, methods, regulations, policies, operations, techniques, and/or standards in order to plan and coordinate the delivery of an IT cybersecurity program for end users at all levels in the organization.
• Experience developing, implementing, and/or administering an IT security program to protect information available on a major wide area network and the internet.

You cannot qualify on education at the GS-13 level; you must have experience.

KNOWLEDGE, SKILLS AND ABILITIES (KSAs): Your qualifications will be evaluated on the basis of your level of knowledge, skills, abilities and/or competencies in the following areas:

• Attention to Detail - Is thorough when performing work and conscientious about attending to detail.
• Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services.
• Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately.
• Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations.
• Information Systems/ Security - Knowledge of methods, tools, and procedures, including development of information security plans, to prevent information systems vulnerabilities, and provide or restore security of information systems and network services.
• Project Management - Knowledge of the principles, methods, or tools for developing, scheduling, coordinating, and managing projects and resources, including monitoring and inspecting costs, work, and contractor performance. Knowledge of the principles, methods, and tools for the coordinated management of an IT program to include providing oversight of multiple IT projects, integrating dependent schedules and deliverables, and related activities (for example, benefits management, life cycle management, program governance).

For all types of consideration, experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience

For additional information about applying to Federal positions, please click on the following link: https://www.opm.gov/policy-data-oversight/classification-qualifications/general-schedule-qualification-policies/#url=e4

Students enrolled in a qualifying degree program can apply if the anticipated graduation date is within six months of closing date of the announcement. Graduation transcript must be received before start date.

Other applicants must meet all qualification requirements by the closing date of this announcement.

Additional information

ADDITIONAL CONDITIONS OF EMPLOYMENT:

REMOTE WORK: This position may be eligible for Remote Work. Remote work is an arrangement in which an employee works at an alternative worksite (e.g., from home) and is not expected to report to the office to work. Remote work location will be determined upon/after selection and may affect locality pay. If selected as a remote work position, must have access to high speed internet and cell phone service meeting current Agency standards from the approved work location within the Contiguous United State and sign a remote work agreement. The difference in salary is determined by the locality pay in each location. Salaries for all areas are available on the OPM website at: https://www.opm.gov/policy-data-oversight/pay-leave/salaries-wages/2022/general-schedule/

TELEWORK ELIGIBILITY: Telework availability will be based upon the mission requirements and supervisory determination. If approved for occasional telework, you will be required to report to the office on a regular basis. The number of telework days approved is determined by the agency policy, emergency situations, the approval of your immediate supervisor, and if applicable, approval of additional officials.

This is not a Bargaining unit position.

The agency has the option of extending a term appointment up to the 4-year limit.

This announcement may be used to fill additional Merit Promotion positions if similar vacancies occur within 90 days of the issue date of the referral certificate.

Benefits

A career with the U.S. government provides employees with a comprehensive benefits package. As a federal employee, you and your family will have access to a range of benefits that are designed to make your federal career very rewarding. Opens in a new windowLearn more about federal benefits.

Review our benefits

Eligibility for benefits depends on the type of position you hold and whether your position is full-time, part-time or intermittent. Contact the hiring agency for more information on the specific benefits offered.

How You Will Be Evaluated

You will be evaluated for this job based on how well you meet the qualifications above.

PLEASE BE CLEAR AND SPECIFIC. WE WILL NOT MAKE ASSUMPTIONS REGARDING YOUR EXPERIENCE. If your resume/application does not support your questionnaire answers, we will not allow credit for your response(s). Your resume must contain sufficiently detailed information upon which to make a qualification determination. Please ensure that your resume contains specific information such as position titles, beginning and ending dates of employment for each position, average number of hours worked per week, and if the position is/was in the Federal government, you should provide the position series and grade level.

DIRECT HIRE: All applications will be reviewed to determine if they meet the basic qualifications for this position, specifically the educational and specialized experience requirements. Applicants will not be rated or ranked. Veteran's Preference does NOT apply. All applications that are verified to meet the basic qualifications will be referred to the selecting official. Applications received under direct hire public notice may or may not result in a referral or selection. Management has the prerogative to select at any grade level.

GOVERNMENT EMPLOYEES: If you meet the qualification requirements, your application will be placed in one of two categories: Qualified and Well Qualified which is based upon your responses to the vacancy questions. Within these categories, the top rated applications will be reviewed for the quality of your experience, education and training relevant to the position. If referred, all relevant documents including performance appraisals and awards submitted with your application package will be forwarded to the hiring official for review. Eligible Federal employees also seeking consideration for noncompetitive reassignment for this position, must indicate interest in the assessment. Noncompetitive federal candidates must have competitive status on a SF-50, meet minimum qualifications, have served at the same grade or higher, and held or exceeded the promotion potential of this position.

Applicants who apply for Merit Promotion (Federal Government) consideration will also receive consideration under Direct Hire.

ALL APPLICANTS:

Your application will be rated on the extent and quality of your experience, education and training relevant to the position. The answers you select in the on-line process must be substantiated in your application package. If upon review, it is determined that your described work history, competencies, and/or supporting documents do not support your answer choices, your application may be updated on your behalf or you may not be referred to the selecting official. The Automated Staffing Office is ultimately responsible for determining your final rating.

You may preview questions for this vacancy.

Benefits

A career with the U.S. government provides employees with a comprehensive benefits package. As a federal employee, you and your family will have access to a range of benefits that are designed to make your federal career very rewarding. Opens in a new windowLearn more about federal benefits.

Review our benefits

Eligibility for benefits depends on the type of position you hold and whether your position is full-time, part-time or intermittent. Contact the hiring agency for more information on the specific benefits offered.

Required Documents

As a new or existing federal employee, you and your family may have access to a range of benefits. Your benefits depend on the type of position you have - whether you're a permanent, part-time, temporary or an intermittent employee. You may be eligible for the following benefits, however, check with your agency to make sure you're eligible under their policies.

RESUME - All applicants must provide a resume created within USA Jobs Resume Builder, that shows relevant experience, education and support the required specialized experience. Formatted resumes can by uploaded later in the application process.

FOR THE GS-11 ONLY - TRANSCRIPTS are REQUIRED if you are substituting education for experience. The transcripts need not be official, but must show that you meet the stated education requirements, including specific major or class requirements.

WRITING SAMPLE: Varies by position and supervisory determination. You may be asked to provide a writing sample.

PERFORMANCE APPRAISALS/INCENTIVE AWARDS: If applicable, performance appraisals and/or Incentive award documentation may be submitted and forwarded to the selecting official in consideration of your application. To receive credit, submit a recent performance appraisal (dated within 18 months) showing the official rating of record, signed by a supervisor, or statement why the performance appraisal is unavailable (do not submit a performance plan) and/or incentive award documentation dated within the last 18 months (i.e. performance awards, special act or achievement awards, quality step increases, etc.).

FEDERAL APPLICANTS: You must submit SF-50(s) that verify your highest competitive grade, full performance level, and eligibility as a federal applicant. DO NOT submit an award SF-50 as these often do not verify grade or eligibility. For consideration for a promotion, Box 4 of the SF-50 must show a date that is at least 52 weeks prior to the job announcement closing. We recommend submitting your last promotion SF-50 or within-grade increase SF-50. Pay adjustment raise SF-50s for the current year will not support the 52 weeks' time-in-grade requirements. https://www.usajobs.gov/Help/working-in-government/service/SF-50/

NON COMPETITIVE APPLICANTS: If requesting concurrent consideration for Non-competitive (NC) appointment eligibility, you must provide the appropriate SPECIAL APPOINTING AUTHORITY DOCUMENTS, such as PCS orders (military spouse) describing move & marriage certificate; letter from VA or DD214 describing 100% disability of spouse; letter from State Vocational Office certifying disability (schedule A), etc. For more information, visit military spouse NC appointments or Persons with Disabilities NC appointments.

DISPLACED EMPLOYEES: If requesting consideration under the Career Transition Assistance Program (CTAP) or Interagency CTAP program (ICTAP), you must meet the well qualified standards for this vacancy (meeting minimum requirements for position and scoring at least an 85) and provide all of the following documents:

• your most recent performance appraisal,
• the proof of eligibility letter from the Agency, and
• your most current SF-50, displaying current series and grade.

Displaced employees may be eligible for ICTAP or CTAP priority consideration. For more information, please review the OPM Employee's Guide to Career Transition.

Failure to submit any of the required documents by the closing date of the vacancy will result in your removal from consideration for this position. Please review your application prior to final submission and ensure you have submitted all appropriate documents. Uploading documents to USA Jobs does NOT ensure inclusion with your application to our system. You must verify that the documents are in the system with your application prior to final submission.

If you are relying on your education to meet qualification requirements:

Education must be accredited by an accrediting institution recognized by the U.S. Department of Education in order for it to be credited towards qualifications. Therefore, provide only the attendance and/or degrees from schools accredited by accrediting institutions recognized by the U.S. Department of Education.

Failure to provide all of the required information as stated in this vacancy announcement may result in an ineligible rating or may affect the overall rating.

How to Apply

You must submit a complete application package (including resume, vacancy questions and supporting documents) no later than 11:59 (EST) on the closing date of the announcement.

• To begin, click the "Apply Online" button on the job announcement posting.
• Follow the directions to register, submit all required documents and complete the assessment questionnaire.
• You may review your saved application(s) at https://my.usajobs.gov.

If you are having difficulty applying online, please contact the DOT Automated Staffing Office via email at: Transjobs@dot.gov

Agency contact information

Automated Staffing Office

Phone

000-000-0000

Email

TRANSJOBS@dot.gov

Address

DOT, FEDERAL HIGHWAY ADMINISTRATION
Submit Application and Documents Online
1200 New Jersey Ave SE / HAHR - 50
Washington, District of Columbia 20590
United States

Next steps

You may check your application status by logging into USAJobs.com. (Select "My USAJOBS" and click "Applications"). Within two weeks of the closing date, a Human Resources Specialist will evaluate your application. Ratings will be determined based on the documents and information received by the closing date. Qualified candidates will be assigned a category, not including points that may be assigned for veterans' preference. If the vacancy is advertised under status, your application will be scored on a scale between 70 - 100. The most highly qualified candidates are then referred to the hiring manager for further consideration. If the vacancy was advertised under category rating, then the appropriate veteran's preference will be applied. If you are selected for an interview, the hiring agency will contact you directly. Once the position is filled, we will notify all applicants of their final status.