IT Security Operations Specialist — Level II

The IT Security Operations Specialist - Level II provides operational cybersecurity support for the Department of Homeland Security (DHS) Intelligence Enterprise (DHS IE) by performing day-to-day information security operations across multiple functional areas. This position supports Supply Chain Risk Management (SCRM) security incident management privileged user administration removable media control equipment accountability SCIF security operations and Identity Credential and Access Management (ICAM) services including Intelligence Community Public Key Infrastructure (IC PKI) and Homeland Secure Data Network (HSDN) token management.

Working closely with Information System Security Officers (ISSOs) Information System Security Managers (ISSMs) system administrators security operations personnel and Government stakeholders the IT Security Operations Specialist ensures compliance with DHS 4300C Intelligence Community (IC) security policies and Federal cybersecurity requirements while maintaining the operational security posture of DHS IE systems and facilities.

Key Responsibilities

• Support daily IT security operations across the DHS Intelligence Enterprise ensuring compliance with DHS Intelligence Community and Federal cybersecurity policies and operational procedures.
• Perform Supply Chain Risk Management (SCRM) activities including:
  • Pre-Procurement Device (PED) reviews
  • Hardware risk assessments
  • Equipment accountability reviews
  • Supply chain security documentation
• Support IT security incident reporting tracking documentation and escalation in accordance with DHS 4300C NIST guidance and Intelligence Community policies.
• Coordinate incident response activities and maintain incident records throughout the incident lifecycle.
• Maintain the enterprise Privileged User database and monitor privileged account compliance.
• Generate weekly monthly and quarterly privileged user reports metrics and compliance documentation.
• Administer removable media management activities including:
  • Media registration
  • Accountability tracking
  • Inventory management
  • Compliance reporting
  • Secure media handling procedures
• Perform equipment sanitization and decommissioning activities in accordance with DHS NIST and Intelligence Community media sanitization standards.
• Conduct equipment inspections and provide entry and exit control services for all hardware entering or leaving Sensitive Compartmented Information Facilities (SCIFs).
• Support the Data Access Cell (DAC) by administering user accounts access permissions and credential management services.
• Manage the complete lifecycle of IC PKI and HSDN tokens including:
  • Token issuance
  • PIN resets
  • Key recovery
  • Token replacement
  • Token reissuance
  • Token revocation
• Perform face-to-face identity verification of IC PKI subscribers in accordance with Federal Identity Credential and Access Management (FICAM) and Intelligence Community requirements.
• Maintain accountability for IC PKI and HSDN tokens using the HSDN Token Tracking System (TTS).
• Prepare and submit monthly IC PKI HSDN DAC and Token Tracking System (TTS) metrics and accountability reports.
• Perform quarterly token inventory audits and reconcile discrepancies.
• Participate in Intelligence Community PKI working groups as the DHS I&A representative and communicate policy updates to program stakeholders.
• Support Government data calls audits inspections and cybersecurity compliance reviews.
• Maintain operational documentation standard operating procedures (SOPs) and security records related to IT security operations.

Minimum Qualifications

• Active Top Secret/Sensitive Compartmented Information (TS/SCI) security clearance.
• Minimum 3-5 years of experience supporting IT security operations privileged access management information assurance cybersecurity operations or systems administration within a classified Federal Government or Intelligence Community environment.
• Working knowledge of:
  • NIST SP 800-53
  • DHS Sensitive Systems Policy Directive 4300C
  • Intelligence Community security operational requirements
  • Federal Identity Credential and Access Management (FICAM) principles
• Experience supporting:
  • Privileged user management
  • Removable media control
  • Security incident reporting
  • Equipment inspections
  • Hardware accountability
  • SCIF operational security procedures
• Familiarity with Intelligence Community Public Key Infrastructure (IC PKI) and Homeland Secure Data Network (HSDN) token lifecycle management.
• Experience maintaining security documentation operational metrics and compliance reports.
• Current CompTIA Security certification or an equivalent DoD 8570/8140-approved cybersecurity certification.
• Bachelors degree in Information Technology Cybersecurity Information Systems Computer Science or a related discipline. Equivalent professional experience may be substituted where permitted.

Preferred Qualifications

• Current Certified Information Systems Security Professional (CISSP) or Certified Authorization Professional (CAP) certification.
• Experience supporting DHS Intelligence & Analysis (I&A) or other Intelligence Community cybersecurity programs.
• Experience using DHS Information Assurance (IA) IT Service Management (ITSM) tools for ticket and request management.
• Familiarity with Federal Identity Credential and Access Management (FICAM) and ICAM programs.
• Experience with Supply Chain Risk Management (SCRM) policies and Federal hardware security requirements.
• Knowledge of NIST SP 800-161 (Cyber Supply Chain Risk Management) and related Federal guidance.
• Experience supporting SCIF operations COMSEC procedures or secure facility access control.

Required Certifications

One of the following current certifications is required:

• CompTIA Security (or equivalent DoD 8570/8140-approved certification)

Preferred certifications include:

• Certified Information Systems Security Professional (CISSP)
• Certified Authorization Professional (CAP)

Clearance Requirement

Active Top Secret/Sensitive Compartmented Information (TS/SCI) Clearance Required

Required Experience:

IC