INDUSTRIAL SECURITY SPECIALIST (TRADITIONAL REVIEWER)

Overview

Excel as a Traditional Reviewer on DCSA's Cyber Operational Readiness Assessment (CORA) Team. Conduct advanced security assessments using STIGs, provide expert analysis, and strengthen national cyber defense. Build specialized expertise, shape solutions to complex risks, and advance your career as a Cyber Mission Enabler. Join a high-visibility mission to safeguard critical assets, validate security postures, and defend our nation's most sensitive networks. Apply today!

Major Duties

As a INDUSTRIAL SECURITY SPECIALIST (TRADITIONAL REVIEWER) you will be responsible for the following duties: - Conduct security compliance reviews at contractor facilities per federal standards. - Conduct both technical (evaluation of technology) and non-technical (evaluation of people and operations) risk and vulnerability assessments in the Traditional Security technology area. - Identify systemic security issues through analysis of vulnerability, configuration, and operational data. - Review authorization and assurance documentation to confirm that the level of risk remains within acceptable parameters. - Prepare audit reports that identify technical and procedural findings and provide recommended remediation strategies and solutions.

Qualifications

The experience described in your resume will be evaluated and screened from the Office of Personnel Management's (OPMs) basic qualifications requirements. See: https://www.opm.gov/policy-data-oversight/classification-qualifications/general-schedule-qualification-standards/#url=Group-Standards for OPM qualification standards, competencies and specialized experience needed to perform the duties of the position as described in the MAJOR DUTIES and QUALIFICATIONS sections of this announcement by 08/31/2026 Applicant must have directly applicable experience that demonstrates the possession of the knowledge, skills, abilities and competencies necessary for immediate success in the position. Qualifying experience may have been acquired in any public or private sector job, but will clearly demonstrate past experience in the application of the particular competencies/knowledge, skills and abilities necessary to successfully perform the duties of the position. You must have specialized experience sufficient to demonstrate that you have acquired all the competencies necessary to perform at a level equivalent in difficulty, responsibility, and complexity to the next lower grade (GS/GG-12) in the Federal service and are prepared to take on greater responsibility. Generally, this would include one year or more of such specialized experience. Specialized experience for this GG-13 position includes: Evaluating Traditional Security policies and assessing compliance using Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs). Performing comprehensive impact, threat, and risk assessments as part of a multidisciplinary security team. Preparing detailed security audit reports that identify technical and procedural findings, and recommending corrective actions. Applying risk management processes (e.g., Risk Management Framework) to assess and mitigate risks, ensuring compliance with laws, regulations, and guidelines for securing personnel, facilities, and classified information. Specifically you will be evaluated on the following competencies: 1. Cybersecurity Threat Mitigation: Expertise in protecting classified information and critical technologies from foreign intelligence threats. 2. Technical Security Assessments (STIGs/SRGs): Proficient in technical assessments using DOD STIGs/SRGs or other assessment criteria to identify network and system vulnerabilities. 3. Risk & Vulnerability Evaluation: Skilled in assessing technical and operational risks to identify systemic security issues. 4. Emergency Response: Proven ability to quickly develop incident response plans for high-visibility security incidents. 5. Collaborative Security Analysis: Experienced collaborating with experts to enhance security assessments and threat mitigation. 6. Clear Communication: Ability to clearly communicate complex security findings in reports and presentations.

Education

Substitution of education may not be used in lieu of specialized experience for this grade level.