Cyber Security/Information Assurance (IA) Special Advisor

Overarching areas of particular interest include Information Assurance, Cyber Security/Cyber Warfare, and Cloud Computing/Architecture/Engineering. There are three potential levels available, depending on the candidate's education/experience levels. The three levels are explained below, followed by more specifics.

Level 1: Bachelor's Degree or equivalent experience < 3 years

Experience in performing one or more areas of information security compliance, risk management, security engineering, system certification, IT operations security, incident response. Certification in an information assurance field desired.

Level 2: Bachelor's Degree or equivalent experience within related field. 3-6 years

Experience in performing three or more areas information security compliance, risk management, security engineering, system certification, IT operations security. Certification in an information assurance field desired.

Level 3: Bachelor's Degree or equivalent experience within related field. 7-10 years

Experience in performing three or more areas of information security compliance, risk management, security engineering, system certification, IT operations security, and incident response. Certification in an information assurance field desired. Additional experience relevant to project strategic direction, vision, and leadership. Expertise in dealing with changes caused by internal and external factors and in developing solutions and recommendations for issues caused by change. Expertise to act as trusted advisor to senior leadership. Specialist in functional area of with extensive evidence of ability to provide strategic direction in leading activities in support of team and enterprise objectives.

Tasks:

• Develop security architectures and engineering system specifications.
• Conduct strategic planning and recommend implementation strategies.
• Advise and assist government on:

o Security and privacy policy

o Trusted product assessment

o Enterprise security engineering

o Secure systems management

o Penetration and exploitation

o Insider threat analysis and protection

o Cyber situation awareness

o Attack sensing and warning

o Secure wireless networking and mobile computing

o Secure operating systems, secure workstations, secure data management, secure web technology, and secure protocols

o Authentication

Knowledge, Skills and Abilities:

• Experience in performing one or more areas of:

o Information security compliance

o Risk management

o Security engineering

o System certification

o IT operations security

o Incident response

Certifications Required/Desired:

• Certification in information assurance area desired (applicable certifications will be required within 90 days of hire date; not all are required-applicable certifications will depend on position):

o DOD 8570.01-M Level I Certifications

• CISSP
• A+
• Network+
• SSCP
• GISF
• GSLC
• Security+
• CAP

o DOD 8570.01-M Level II Certifications

• CISSP
• GSEC
• Security+
• SCNP
• SSCP
• GSLC
• CISM
• CAP

o DOD 8570.01-M Level III Certifications

• ISSEP
• ISSAP
• CISA
• CISSP
• GSE
• SCNA
• GSLC
• GISM

• Within 90 days of in-processing, the candidate must be certified in accordance with DOD 8570.01-M in either Technical or Management Level II or Level III, commensurate with the candidate's level.
• Levels 2 and 3 require DOD 8570.01-M Management or Technical Level III (see applicable certifications above; applicable certs will be determined based on position) within 90 days of hire
• Level 1 requires DOD 8570.01-M Management or Technical Level II (see applicable certifications above; applicable certs will be determined based on position) within 90 days of hire