Duties

There are a variety of Security System Operations and Maintenance opportunities across the Department, including supporting several specialized programs at the DHS Office of Strategy, Policy, and Plans (PLCY), Cybersecurity and Infrastructure Security Agency (CISA), DHS Office of the Chief Information Officer (OCIO), and the Federal Emergency Management Agency (FEMA).

Depending on your career level and role, DHS Cybersecurity Service employees in the Leadership Career Track, with a technical capability in Security System Operations and Maintenance, will generally apply their expertise to perform a range of tasks, including:

• Overseeing and/or leading a team(s) performing network, system, or application security reviews to identify gaps in security architecture, recommend risk acceptance, and develop a security risk management plan.

• Working with stakeholders to propose and/or develop highly effective solutions for resolving computer security incidents and ensuring compliance through tools and processes that enable agile response to cyber incidents.

• Leading or managing a team(s) that configure and monitor security devices in accordance with DHS or Component policies and best practices to support network mitigation efforts.

• Proactively ensuring cybersecurity testing of developed applications and/or systems to maintain the security of relevant DHS or Component systems.

• Proposing, overseeing and/or organizing collaborative efforts for continuously monitoring and maintaining DHS or Component enterprise systems to identify unauthorized and/or malicious activities and events and maintain the systems' security posture.

• Applying knowledge of system implementation and configuration to identify security deficiencies during security reviews and certification testing, ensuring successful transition from development to operation.

• Using known information about incidents and their effects on networks, systems, cloud environments, and applications to classify the threat and risk levels of activities and events and recommending short- and long-term recovery and repair actions.

• Customizing communications on aggregate security system's status and corresponding courses of action for different levels of leadership and other appropriate parties in support of mitigating any issues compromising DHS or Component security.

• Proactively analyzing plans and procedures to respond to security incidents that interrupt ongoing cybersecurity operations ensuring minimal damage, restoration of operations, maintenance of system integrity and maximum system resilience.

• Working with system and network administrators to ensure systems are not compromised during system security changes or transitions from development to production and assist others who are less seasoned.

• Collaborating with internal and external DHS stakeholders to collect, organize, analyze, report and act on information related to security activities and events on computer networks, systems, and applications.

• Developing supporting documentation on incident response and containment procedures in alignment with DHS or Component policies and procedures.