The Cybersecurity Specialist T&R Fraud is responsible for performing complex (journey-level) information technology and cyber security analysis and control work. The incumbent is responsible for planning coordinating and implementing security policies and procedures to protect cybersecurity assets and delivering fraud incident detection incident response threat assessment cyber intelligence software security and vulnerability assessment services. This position will proactively work with Cybersecurity team IT staff and agency employees.
The Cybersecurity Engineer T&R Fraud is responsible for performing advanced (senior-level) information technology and cyber security analysis and control work. The incumbent will perform technical writing planning coordination and implementation of security policies and procedures to protect cybersecurity assets while also delivering services in fraud incident detection and response fraudulent activity analysis threat assessment cyber intelligence software security and vulnerability assessment. This position will proactively work with Cybersecurity team IT staff and agency employees.
This position is being posted at two levels. The applicant selected will be offered the role that aligns with their education and experience
Cybersecurity Specialist T&R Fraud - $81168.00 - $101460.00
Cybersecurity Engineer T&R Fraud- $108036.00 - $135044.00
WHAT WILL YOU DO:
Cybersecurity Specialist T&R Fraud
Fraud Risk Management
Assists with queries and generate reports about fraud trends leveraging security and fraud analysis tools.
Supports fraud tool library to ensure continued performance and effectiveness of fraud queries and tools.
Creates tracks and analyzes data and develop detailed analytic metrics packages for senior-level management.
Assists with collection processing preservation and analysis of digital-related evidence to support fraud investigations.
Assists with responding to crises or urgent situations to mitigate immediate and potential threats.
Assists with Implementing security measures to resolve fraud-related vulnerabilities mitigate risks and recommends security changes to system or system components as needed.
Assists with assessment and monitoring of fraud events related to system implementation and testing practices.
Assist in the evaluation of penetration testing results to identify potential security vulnerabilities and recommend mitigation strategies.
Performs event correlation using information gathered from a variety of sources within the enterprise to gain situational awareness and determine the effectiveness of an observed fraud event.
Security and Privacy Risk Management
Supports the creation of assessment reports that identify technical and procedural findings and provide recommended remediation strategies/solutions.
Assists with risk management and mitigation strategies.
Training and Awareness
Assists with fraud and cyber-related training to stakeholders.
Assists with research strategies and knowledge management.
Coordinates with internal and external subject matter experts to ensure existing standards reflect organizational functional requirements and meet industry standards..
Governance
Assists with drafting and implementing policies related to fraud and cybersecurity risk.
Participate in or support fraud risk committees.
Assists in developing or maintaining fraud-related metrics for reporting purposes.
Performs related work as assigned.
Cybersecurity Engineer T&R Fraud
Fraud Risk Management
Performs queries and generate reports about fraud trends leveraging security and fraud analysis tools.
Maintains code library to ensure continued performance and effectiveness of fraud queries and tools.
Creates tracks and analyzes data and develops detailed analytic metrics packages for senior-level management.
Collects processes preserves and analyzes digital-related evidence to support fraud investigations.
Responds to crises or urgent situations to mitigate immediate and potential threats. Uses mitigation preparedness and response and recovery approaches. Investigates and analyzes all relevant response activities.
Characterize and analyze network traffic to identify anomalous activity and potential threats to network resources.
Perform fraud risk analysis (e.g. threat vulnerability and probability of occurrence) whenever an application or system undergoes a major change and provide recommendations for mitigation strategies/solutions.
Read interpret and execute simple scripts on Windows and UNIX systems (e.g. those that perform tasks such as: parsing large data files automating manual tasks and fetching/processing remote data)
Assesses and monitors fraud events related to system implementation and testing practices.
Evaluates penetration testing results to identify potential security vulnerabilities and recommend mitigation strategies.
Performs event correlation using information gathered from a variety of sources within the enterprise to gain situational awareness and determine the effectiveness of an observed fraud event.
Security and Privacy Risk Management
Prepares audit reports that identify technical and procedural findings and provide recommended remediation strategies/solutions.
Assists with risk management and mitigation strategies.
Training and Awareness
Provides fraud and cyber-related training to stakeholders.
Coordinates with internal and external subject matter experts to ensure existing standards reflect organizational functional requirements and meet industry standards.
Establishes and maintains communication channels with stakeholders.
Governance
Develops and drafts policy plans and strategy in compliance with laws regulations policies and standards in support of organizational cyber activities.
Performs related work as assigned.
WHAT WILLYOU BRING:
Required Education
Bachelors degree from an accredited college or university in Cybersecurity Information Security or a closely related field.
High school diploma or equivalent and additional full-time experience in cybersecurity information security systems analysis programming computer operations IT business analysis or similarly related experience may be substituted on an equivalent year-for-year basis.
Required Experience
Two (2) - Four (4) years of full-time directly related progressively responsible experience in cybersecurity information security systems analysis programming computer operations IT business analysis or related experience.
One (1) year of full-time directly related progressively responsible experience developing and training employees on security/privacy policies data handling practices and procedures and legal obligations or related experience.
Experience may be concurrent.
A masters degree or doctoral degree in a directly related field may be substituted on an equivalent year-for-year basis.
Required Registration Certification or Licensure (Cybersecurity Specialist T&R Fraud)
Ability to obtain certification as a Systems Security Certified Professional (SSCP) Security or other security related certifications within 180 days of effective start date.
Required Registration Certification or Licensure (Cybersecurity Engineer T&R Fraud)
Certification as a Certified Information Systems Security Professional (CISSP) or other security related certifications; or
Certification as a Certified Fraud Examiner (CFE) or other fraud-related certification.
Preferred Qualifications
Experience with risk management frameworks as it pertains to the National Institute of Standards and Technology.
Experience with various security monitoring tools network and web assessment tools and scripting languages.
Knowledge Skills and Abilities
Knowledge of:
Knowledge of fraudulent activity and monitoring technology terminology and operations.
Computer systems and technology limitations capabilities and security infrastructures.
Information security systems controls methodologies practices and regulations including data encryption and information protection.
National and international laws regulations policies along with ethics as they relate to cybersecurity/privacy.
Organizations risk tolerance and/or risk management approach.
Applicable state and federal laws statutes Presidential Directives executive branch guidelines related to information security or cyber security.
Current and emerging cyber technologies
Skills in:
Analyzing complex technical problems and developing workable solutions
Managing multiple conflicting tasks/deadlines.
Effective verbal and written communication of complex technical information.
Ability to:
Effectively assess areas of risk associated with information security.
Determine the validity of technology trend data.
Develop policy plans and strategies in compliance with laws regulations policies and standards in support of organizational information security assurance.
Establish and maintain harmonious working relationships with co-workers agency staff and external contacts.
Work effectively in a professional team environment.
Military Occupational Specialty (MOS) Codes:
Veterans Reservists or Guardsmen with experience in the Military Occupational Specialty ( ) along with the minimum qualifications listed above may meet the minimum requirements and are highly encouraged to apply. Please contact Talent Acquisition at with questions or for additional information.
To view all job vacancies visit or more information visit.