Senior Information Technology Specialist (Cyber Defense Engineer)
Job description
Duties
This position is a full-time position in the Office of Information Technology at the Supreme Court of the United States, in Washington, D.C. Under the guidance of senior staff, the incumbent will perform the full range of tasks and activities involved in developing, coordinating, implementing and maintaining standards, procedures and technical solutions to protect the confidentiality, integrity and availability of information systems and data.
The incumbent will be responsible for the following duties:
- Work with stakeholders at all levels of the organization to communicate the state of information security, inform of possible risks, and suggest ways to improve security.
- Perform analysis of log files from a variety of sources (e.g., individual host logs, network traffic logs, firewall logs, and intrusion detection system logs) to identify possible threats to security.
- The incumbent will make recommendations to senior management on results of analysis and work closely with other Information Technology groups to refine and enhance security controls.
- Deploy and maintain endpoint cyber security tools, such as Data Loss Prevention, Endpoint Detection & Response, and Anti-Virus.
- Provide as needed support across multiple cyber security functional areas and tools, such as incident response, IPS/IDS, vulnerability scanning and SIEM.
- Identify and refine false positive detections among cyber security tools to improve anomaly detections.
- Assist with problem solving, process improvement, project management, and information security policies, and participate in on-call support.
- Design and implement new solutions to protect systems and data. Work with other IT teams to implement the new safeguards, whether it is in the form of software, hardware, or new operating procedure.
Requirements
Conditions of Employment
- U.S. Citizenship
- Meet Experience Requirements (see Qualifications)
- Employment is subject to successful completion of a security background check.
- If you are a male applicant born after December 31, 1959, you must certify that you have registered with the Selective Service System, or are exempt from having to do so under the Selective Service Law. See: www.sss.gov
- Must be able to obtain and maintain a security clearance at the level of Top Secret.
Qualifications
- At least 2 years of experience of management of enterprise cyber security network or endpoint tools.
- Knowledge of intrusion detection methodologies and techniques for detecting host and network-based intrusions.
- Ability to apply network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth).
- Knowledge of incident response and handling methodologies, incident categories, and timelines for responses.
- Ability to optimize systems to meet enterprise performance requirements.
- Knowledge of cyber defense and vulnerability assessment tools and their capabilities.
- Knowledge of information technology (IT) security principles and methods (e.g., firewalls, demilitarized zones, encryption).
- Skill in configuring and utilizing software-based computer protection tools (e.g., software firewalls, antivirus software, anti-spyware).
- Experience with security tools and technologies such as Endpoint Detection and Response, Data Loss Prevention, Network Intrusion Detection/Prevention Systems, Security Information and Event Management, and Anti-Virus.
- Assist in the construction of signatures which can be implemented on cyber defense network tools in response to new or observed threats within the network environment.
- Ability to work with engineers/vendors to improve capabilities, resolve issues, and increase performance of security operation devices and configurations.
- Ability to validate IDS alerts against network traffic using packet analysis tools.
- Knowledge of operating system (Windows, Linux/Unix) command-line tools.
- Familiarity with network concepts, user authentication, and digital signatures.
- Knowledge of endpoint security events and how they relate to possible attacks/intrusions.
- Ability to balance business needs with security policies.
- Organizational skills with the ability to multitask, take direction, prioritize, and manage multiple activities/tasks to achieve objectives.
- Ability to work in a fast-paced, technically challenging area; ability to anticipate and manage changes or problems; assess impacts and make sound recommendations.
- Experience performing full incident response lifecycles from preparation to containment/eradication and post-incident activity is desired, but not required.
- Proficiency in tailoring and/or recommending detection rules based on newly discovered IOCs and threats against government networks.
- Knowledge of APT TTPs intrusion vectors and countermeasures against them.
- CISSP, GCIA, GCIH, CASP, and other security certifications desired, but not required.
Education
Candidate must have a college degree (computer related) and two years of demonstrated cyber security related experience or five years of demonstrated cyber security experience.
Additional information
Working for the Supreme Court of the United States offers a comprehensive benefits package that includes, in part, paid vacation, sick leave, holidays, life insurance, health benefits, and participation in the Federal Employees Retirement System. Additional benefits include flexible spending accounts, long-term care insurance, and the SmartBenefits transit subsidy.
The Court provides appropriate in-house and outside third-party technical training. Each staff member is provided with access to high levels of technical support; an in-house library of up-to-date commercially available technical books and software; a technology lab for development and testing of technology products; and a fully equipped computer training room. In addition, the Court provides all employees free access to an in-house exercise facility/weight training room.
Recruitment incentives may be authorized. If authorized, certain incentives will require you to sign a service agreement to remain an employee of the Supreme Court of the United States for a period of up to 2 years. This statement does not guarantee that an incentive will be offered and paid. Incentives may include a recruitment incentive and/or creditable service for annual leave for prior non-federal related work experience or prior uniformed service, if the applicant possesses the skills and experience that are essential to the position, are necessary to achieve an important agency mission or performance goal and were acquired in a position with duties directly related to those of the position in which he or she is seeking appointment.
Benefits
Review our benefits
How You Will Be Evaluated
You will be evaluated for this job based on how well you meet the qualifications above.
We will review and assess your application package in comparison with the posted qualifications for the position.
Benefits
Review our benefits
Required Documents
As a new or existing federal employee, you and your family may have access to a range of benefits. Your benefits depend on the type of position you have - whether you're a permanent, part-time, temporary or an intermittent employee. You may be eligible for the following benefits, however, check with your agency to make sure you're eligible under their policies.
The following documents are required:
- A cover letter
- A resume
How to Apply
You must upload the cover letter and resume. These two documents documents are required and must be received by the closing date, 05/23/2023, in order to be considered. Please submit only these documents unless you have prior federal and/or military experience. In that case your most recent SF-50, Statement of Service, and/or DD-214 will also be required.
- To begin, click Apply Online to create a USAJobs account or log in to your existing account. Follow the prompts to select your USAJobs resume and/or other supporting documents and complete the occupational questionnaire.
- Click the Submit My Answers button to submit your application package.
- It is your responsibility to ensure your responses and appropriate documentation is submitted prior to the closing date.
- To verify your application is complete, log into your USAJobs account, https://www.usajobs.gov, select the Application Status link and then select the More Information link for this position. The Details page will display the status of your application, the documentation received and processed, and any correspondence the agency has sent related to this application. Your uploaded documents may take several hours to clear the virus scan process.
- To return to an incomplete application, log into your USAJobs account and click Update Application in the vacancy announcement. You must re-select your resume and/or other documents from your USAJobs account or your application will be incomplete.
Agency contact information
Human Resources Office
Phone
(202) 479-3404
Email
hr@supremecourt.gov
Address
Supreme Court of the United States
1 First Street NE
Washington, DC 20543
USNext steps
Upon submission, you will receive an e-mail acknowledging receipt of your application. Please be advised that your application will not be considered complete unless all of the required documents have been received. All applicants will be notified once a selection has been made.
Fair and Transparent
The Federal hiring process is set up to be fair and transparent. Please read the following guidance.
- Equal Employment Opportunity (EEO) Policy
- Reasonable accommodation policy
- Financial suitability
- Selective Service
- New employee probationary period
- Signature and false statements
- Privacy Act
- Social security number request
Required Documents
The following documents are required:
- A cover letter
- A resume
This job is open to
-
The public
U.S. Citizens, Nationals or those who owe allegiance to the U.S.
Clarification from the agency
United States Citizens Only
smogtown13.com is the go-to platform for job seekers looking for the best job postings from around the web. With a focus on quality, the platform guarantees that all job postings are from reliable sources and are up-to-date. It also offers a variety of tools to help users find the perfect job for them, such as searching by location and filtering by industry. Furthermore, smogtown13.com provides helpful resources like resume tips and career advice to give job seekers an edge in their search. With its commitment to quality and user-friendliness, smogtown13.com is the ideal place to find your next job.