This position is located in the Architect of the Capitol (AOC), Office of the Chief Security Officer, Security Division. This position performs a variety of cyber security tasks in support of the AOC security program.
This position is considered "essential" for the purpose of reporting to work when the facility might otherwise be closed. Must have or be able to obtain and maintain a Top Secret/SCI security clearance. Develops new policy regarding AOC Operational Technology (OT) cybersecurity for device, equipment, and system-level cybersecurity configuration and day-to-day security operations of control systems, including security monitoring and maintenance along with stakeholder coordination to ensure the system and its interconnections are secure in support of mission operations. Incumbent serves as the lead to apply cybersecurity and principles to secure OT, to include Industrial Control Systems (ICS) such as Supervisory Control and Data Acquisition (SCADA) systems, Distributed Control Systems (DCS), and other control system configurations such as Programmable Logic Controllers (PLC), while addressing their unique performance, reliability and safety requirements. Serves as the subject matter expert for the AOC's OT cybersecurity, including Industrial Control Systems such as Supervisory Control and Data Acquisition systems, Distributed Control Systems, and other control system configurations such as Programmable Logic Controllers networking concepts and protocols and network security methodologies. Customizes communications (e.g., incident updates and after-action reports) to emphasize the most critical information and address anticipated follow-up concerns of specific target audiences. Proposes and maintains a suite of OT cybersecurity tools, to include SIEM and Endpoint Security Tools. Manages the AOC OT Cybersecurity Policy Program for all AOC owned and/or operated operational technology systems. Creates, maintains, and disseminates system processes, cybersecurity policies, and local procedure documentation including incident response, recovery, and contingency plans. Documents specific tactics, techniques, and procedures to be used when adversarial activity is detected. Tests and reviews plans as needed but not less than annually. Validates all AOC OT cybersecurity-related documentation is current and accessible to properly authorized individuals. Continuously monitors the OT environment for security-relevant events, assesses proposed configuration changes for potential impact to the cybersecurity posture, and assesses the quality of security controls implementation against performance indicators such as security incidents, feedback from external inspection agencies, exercises, and operational evaluations. The incumbent is responsible for utilizing a thorough knowledge of and compliance with applicable AOC and Office of Congressional Workplace Rights (OCWR) safety rules and regulations to ensure that work progresses in a safe manner and to initiate or take corrective action on unsafe conditions in managed areas. Provides or receives training, either on the job or through classroom training, to ensure that the required Personal Protective Equipment (PPE) is utilized. As the program develops, may add additional policy development for platform technology cyber security. Performs other related duties as assigned.
clarissa.anderson@aoc.gov 202-215-4316
Source: USAJOBS.gov — U.S. Federal Government
Apply on official site →