Posted today
Top Secret
Unspecified
Unspecified
Management
Montgomery, AL (On-Site/Office)
Duties
-- Serves as the Computer Security (COMPUSEC) Manager. Protects and maintains the availability, integrity, confidentiality, and accountability of information system resources and information processed throughout the system's life cycle. Establishes and publishes squadron policy to manage the COMPUSEC program. Disseminates information and ensures computer security practices are adhered to by all functional areas in-garrison and in support of deployed war-fighting personnel. Reviews, analyzes, and validates certification and accreditation packages. Continuously identifies and analyzes threats and vulnerabilities to the information systems to maintain an appropriate level of protection.
-- Manages the Information Assurance Program. Implements procedures to ensure protection of information transmitted to the squadron, among units in the squadron, and from the squadron units using local or wide area networks, the worldwide web or other communications modes. Utilizes current and future multi-level security products collectively to provide data integrity, confidentiality, authentication, non-repudiation, and access control of the Local Area Network (LAN). Reports to Major Command (MAJCOM), Air Force Communications Agency (AFCA), National Security Agency (NSA), and Air Force Computer Emergency Response Team (AFCERT) all incidents involving viruses, tampering, or unauthorized system entry. Controls access to prevent unauthorized persons from using network facilities. Limits access to privileged programs (i.e., operating system, system parameter and configuration files, and databases), utilities, and security-relevant programs/data files to authorized personnel.
-- Serves as the Communications Security (COMSEC) Manager for all cryptographic activities including managing the Cryptographic Access Program (CAP). Formulates and develops communications security criteria and requirements for inclusion in mobility, contingency, and exercise plans. Maintains accountability for sensitive cryptographic materials and related COMSEC information. Oversees issuance of COMSEC materials. Maintains COMSEC inventory on the Computerized Management of COMSEC Material (CM2) database. Prepares and evaluates written plans for emergency actions and ensures personnel are fully qualified in the execution of plans. Investigates security incidents to determine the possibility of compromise to COMSEC materials and ensures documentation and reporting to appropriate channels. Performs destruction, receiving, issuing, and inspecting COMSEC material within the most stringent timelines. Furnishes written guidance to user accounts concurring effective dates, accounting procedures, destruction requirements, and physical security of COMSEC keying materials.
-- Implements and manages the Air Force Electronic Key Management System program. This includes system configuration and operation of the Local Management Device, Data Transfer Device, and Key Processor. Initializes the system, performs system backups, determines operator access, and control functions (privilege management), reloads and configures the operating system's parameters. Installs or oversees installation of local COMSEC account hardware and software, including training alternates in the AFEKMS operations. Serves as secure telecommunications units/elements (STU-III) representative and Emissions Security Program (EMSEC) administrator. Develops, implements, and monitors security systems for the protection of controlled cryptographic cards, documents, ciphers, devices, communications centers, and equipment. Validates strapping and configuration options of cryptographic units.
-- Provides technical training and instruction on Computer Security Awareness Training and Education (SATE) program procedures to supervisors, employees, and/or unit security representatives. Utilizes computer-based training for both initial and recurring information protection training. Conveys the degree of reliance on information systems, the potential consequences arising from the lack of secure information systems, the organization's commitment to secure information systems, and the means by which users can protect information systems. Conducts annual COMSEC training for squadron COMSEC users. Uses a wide variety of formal training materials, such as outlines, handouts, publications, films, exhibits, protective devices, and visual aids to provide and/or reinforce information related to communications-computer systems security awareness practices.
-- Assists unit personnel with duties involving a wide range of communications and information systems and telecommunications programs consisting of tactical communications equipment, LAN systems, information resource management, and information protection programs.
-- Performs other duties as assigned.
PLEASE CONTACT HRO FOR COMPLETE POSITION DESCRIPTION.
Requirements
Conditions of employment
MILITARY REQUIREMENTS: This is an excepted service position that requires membership in a compatible military grade in the Alabama Air National Guard. Applicants who are not currently a member of the Alabama Air National Guard must be eligible for immediate membership. If you are not sure you are eligible for military membership, please contact an Alabama Air National Guard recruiter at (800) 864-6264 prior to applying for this position.
MAXIMUM MILITARY RANK: MSGT
EXPERIENCE REQUIREMENTS: Each applicant must fully substantiate (in his/her own words) that he/she meets the requirements of the Specialized Experience listed below: Otherwise, the applicant will be considered unqualified for this position. DO NOT COPY THE VACANCY ANNOUNCEMENT OR THE POSITION DESCRIPTION. DOING SO MAY RESULT IN DISQUALIFICATION FOR THE POSITION.
GENERAL EXPERIENCE: Experience may have been gained in work such as computer operator or assistant, computer sales representative, program analyst, or other positions that required the use or adaptation of computer programs and systems.
SPECIALIZED EXPERIENCE: 1-year specialized experience equivalent to at least the next lower grade. In addition to the OPM IORs (Alternative A) specialized experience examples, specialized experience includes experience, education, or training that approaches techniques and requirements appropriate to an assigned computer applications area or computer specialty area in an organization. Experience planning the sequence of actions necessary to accomplish the assignment where this entailed coordination with others outside the organizational unit and development of project controls. Experience that required adaptations of guidelines or precedents to meet the needs of the assignment. Experience preparing documentation on cost/benefit studies where is involved summarizing the material and organizing it in a logical fashion.
KNOWLEDGE REQUIRED:
-- Knowledge of a wide range of communications and computer security, techniques, requirements, methods, sources, and procedures for the following programs: Computer Security (COMPUSEC); network security, communications security (COMSEC), Electronic Key Management System (AFEKMS), Emissions Security (EMSEC), STU III, FORTEZZA security, and Security Awareness, Training and Education (SATE). This knowledge is necessary to provide appropriate direction to squadron level functions.
-- Knowledge of concepts, principles, methods, and practices in the information systems security to design, develop, implement, and maintain secure systems and services, assess the effectiveness of current systems security and services, evaluate the feasibility of new systems security and services, and provide advice and guidance on complex issues.
-- In-depth knowledge of a wide variety of communications and computer security concepts, principles, practices, and governing directives to interpret, disseminate, and adapt local policy, and implement instructions for unit and/or squadron personnel. Incumbent must be capable of analyzing and resolving difficult and complex security problems.
-- In-depth knowledge of communications and computer software and programs to protect systems from viruses, data tampering, and unauthorized system entry. This includes knowledge of computer-based instructional software and other media to increase and reinforce communications-computer security awareness.
-- In-depth knowledge of the AFEKMS program and related hardware and software, including knowledge of operating systems, local COMSEC Management Software, relational data base management systems, computer-communications software, and Computerized Management of COMSEC Material (CM2).
-- Knowledge of a wide range of communications and computer techniques, requirements, methods, sources, and procedures, including familiarity with approaches used by ADP and communications organizations in other agencies and/or the private sector to accomplish a variety of assignments in the communications and computer security specialty area.
-- Knowledge of system software and systems development life cycles including systems documentation, design development, configuration management, cost analysis, data administration, systems integration, and testing.
-- Comprehensive knowledge of government and industry communications and computer systems, concepts, principles, and practices relative to the systems security function. In-depth knowledge and ability sufficient to serve as the focal point for information security, providing authoritative advice, and assistance on complex, technical, controversial, and precedent setting matters to improve the Information Assurance program comprising many unique organizations and large, complex computer and communications security systems.
-- Knowledge and skill sufficient to develop and evaluate program documentation to include: mission need statements, operational requirements documents and support plans, specifications, proposals, and plans for systems operational test and evaluation of communications and information security systems.
-- Knowledge of information systems security principles and methods to design, develop, implement, and manage systems, networks, and data that ensure confidentiality, integrity, and availability.
-- Knowledge of methods for evaluating, implementing, and disseminating information systems security tools and procedures to ensure, protect, and restore information security systems and network services and capabilities
-- Knowledge of Security Awareness Training and Education (SATE) security training program, training materials, and sources-- Knowledge of information systems security certification and accreditation requirements to monitor and evaluate systems' compliance with those requirements.
-- Skill in oral and written communication to prepare and present reports, interpret policies and guidelines, provide advice and guidance to customers, and represent the organization in interactions with other organizations.
-- Ability to provide technical leadership on projects that require group efforts.
-- Knowledge of strapping and configuration options of cryptographic units.
Education
SUBSTITUTION OF EDUCATION FOR SPECIALIZED EXPERIENCE:
Ph.D.
or
equivalent doctoral degree
or
3 full years of progressively higher level graduate education leading to a Ph.D. or equivalent doctoral degree
You must provide transcripts or other documentation to support your Educational claims. To receive credit for Education, you must provide documentation of proof that you meet the Education requirements for this position.
Additional information
If you are a male applicant who was born after 12/31/1959 and are required to register under the Military Selective Service Act, the Defense Authorization Act of 1986 requires that you be registered or you are not eligible for appointment in this agency ( ).
**This position may be authorized a recruitment or relocation incentive for up to 25%. All incentives must be approved prior to the employee in processing.**
-- Serves as the Computer Security (COMPUSEC) Manager. Protects and maintains the availability, integrity, confidentiality, and accountability of information system resources and information processed throughout the system's life cycle. Establishes and publishes squadron policy to manage the COMPUSEC program. Disseminates information and ensures computer security practices are adhered to by all functional areas in-garrison and in support of deployed war-fighting personnel. Reviews, analyzes, and validates certification and accreditation packages. Continuously identifies and analyzes threats and vulnerabilities to the information systems to maintain an appropriate level of protection.
-- Manages the Information Assurance Program. Implements procedures to ensure protection of information transmitted to the squadron, among units in the squadron, and from the squadron units using local or wide area networks, the worldwide web or other communications modes. Utilizes current and future multi-level security products collectively to provide data integrity, confidentiality, authentication, non-repudiation, and access control of the Local Area Network (LAN). Reports to Major Command (MAJCOM), Air Force Communications Agency (AFCA), National Security Agency (NSA), and Air Force Computer Emergency Response Team (AFCERT) all incidents involving viruses, tampering, or unauthorized system entry. Controls access to prevent unauthorized persons from using network facilities. Limits access to privileged programs (i.e., operating system, system parameter and configuration files, and databases), utilities, and security-relevant programs/data files to authorized personnel.
-- Serves as the Communications Security (COMSEC) Manager for all cryptographic activities including managing the Cryptographic Access Program (CAP). Formulates and develops communications security criteria and requirements for inclusion in mobility, contingency, and exercise plans. Maintains accountability for sensitive cryptographic materials and related COMSEC information. Oversees issuance of COMSEC materials. Maintains COMSEC inventory on the Computerized Management of COMSEC Material (CM2) database. Prepares and evaluates written plans for emergency actions and ensures personnel are fully qualified in the execution of plans. Investigates security incidents to determine the possibility of compromise to COMSEC materials and ensures documentation and reporting to appropriate channels. Performs destruction, receiving, issuing, and inspecting COMSEC material within the most stringent timelines. Furnishes written guidance to user accounts concurring effective dates, accounting procedures, destruction requirements, and physical security of COMSEC keying materials.
-- Implements and manages the Air Force Electronic Key Management System program. This includes system configuration and operation of the Local Management Device, Data Transfer Device, and Key Processor. Initializes the system, performs system backups, determines operator access, and control functions (privilege management), reloads and configures the operating system's parameters. Installs or oversees installation of local COMSEC account hardware and software, including training alternates in the AFEKMS operations. Serves as secure telecommunications units/elements (STU-III) representative and Emissions Security Program (EMSEC) administrator. Develops, implements, and monitors security systems for the protection of controlled cryptographic cards, documents, ciphers, devices, communications centers, and equipment. Validates strapping and configuration options of cryptographic units.
-- Provides technical training and instruction on Computer Security Awareness Training and Education (SATE) program procedures to supervisors, employees, and/or unit security representatives. Utilizes computer-based training for both initial and recurring information protection training. Conveys the degree of reliance on information systems, the potential consequences arising from the lack of secure information systems, the organization's commitment to secure information systems, and the means by which users can protect information systems. Conducts annual COMSEC training for squadron COMSEC users. Uses a wide variety of formal training materials, such as outlines, handouts, publications, films, exhibits, protective devices, and visual aids to provide and/or reinforce information related to communications-computer systems security awareness practices.
-- Assists unit personnel with duties involving a wide range of communications and information systems and telecommunications programs consisting of tactical communications equipment, LAN systems, information resource management, and information protection programs.
-- Performs other duties as assigned.
PLEASE CONTACT HRO FOR COMPLETE POSITION DESCRIPTION.
Requirements
Conditions of employment
- NATIONAL GUARD MEMBERSHIP IS REQUIRED. If you are not sure you are eligible for military membership, please contact a National Guard recruiter prior to applying for this position.
- This is an excepted service position that requires membership in a compatible military assignment in the employing state's National Guard, required prior to the effective date of placement.
- Selectee will be required to wear the military uniform.
- Applicants who are not currently a member of the National Guard must be eligible for immediate membership and employment in the National Guard in the military grade listed in this announcement.
- May be required to successfully complete a probationary period.
- Participation in direct deposit is mandatory.
- May occasionally be required to work other than normal duty hours; overtime may be required.
MILITARY REQUIREMENTS: This is an excepted service position that requires membership in a compatible military grade in the Alabama Air National Guard. Applicants who are not currently a member of the Alabama Air National Guard must be eligible for immediate membership. If you are not sure you are eligible for military membership, please contact an Alabama Air National Guard recruiter at (800) 864-6264 prior to applying for this position.
MAXIMUM MILITARY RANK: MSGT
EXPERIENCE REQUIREMENTS: Each applicant must fully substantiate (in his/her own words) that he/she meets the requirements of the Specialized Experience listed below: Otherwise, the applicant will be considered unqualified for this position. DO NOT COPY THE VACANCY ANNOUNCEMENT OR THE POSITION DESCRIPTION. DOING SO MAY RESULT IN DISQUALIFICATION FOR THE POSITION.
GENERAL EXPERIENCE: Experience may have been gained in work such as computer operator or assistant, computer sales representative, program analyst, or other positions that required the use or adaptation of computer programs and systems.
SPECIALIZED EXPERIENCE: 1-year specialized experience equivalent to at least the next lower grade. In addition to the OPM IORs (Alternative A) specialized experience examples, specialized experience includes experience, education, or training that approaches techniques and requirements appropriate to an assigned computer applications area or computer specialty area in an organization. Experience planning the sequence of actions necessary to accomplish the assignment where this entailed coordination with others outside the organizational unit and development of project controls. Experience that required adaptations of guidelines or precedents to meet the needs of the assignment. Experience preparing documentation on cost/benefit studies where is involved summarizing the material and organizing it in a logical fashion.
KNOWLEDGE REQUIRED:
-- Knowledge of a wide range of communications and computer security, techniques, requirements, methods, sources, and procedures for the following programs: Computer Security (COMPUSEC); network security, communications security (COMSEC), Electronic Key Management System (AFEKMS), Emissions Security (EMSEC), STU III, FORTEZZA security, and Security Awareness, Training and Education (SATE). This knowledge is necessary to provide appropriate direction to squadron level functions.
-- Knowledge of concepts, principles, methods, and practices in the information systems security to design, develop, implement, and maintain secure systems and services, assess the effectiveness of current systems security and services, evaluate the feasibility of new systems security and services, and provide advice and guidance on complex issues.
-- In-depth knowledge of a wide variety of communications and computer security concepts, principles, practices, and governing directives to interpret, disseminate, and adapt local policy, and implement instructions for unit and/or squadron personnel. Incumbent must be capable of analyzing and resolving difficult and complex security problems.
-- In-depth knowledge of communications and computer software and programs to protect systems from viruses, data tampering, and unauthorized system entry. This includes knowledge of computer-based instructional software and other media to increase and reinforce communications-computer security awareness.
-- In-depth knowledge of the AFEKMS program and related hardware and software, including knowledge of operating systems, local COMSEC Management Software, relational data base management systems, computer-communications software, and Computerized Management of COMSEC Material (CM2).
-- Knowledge of a wide range of communications and computer techniques, requirements, methods, sources, and procedures, including familiarity with approaches used by ADP and communications organizations in other agencies and/or the private sector to accomplish a variety of assignments in the communications and computer security specialty area.
-- Knowledge of system software and systems development life cycles including systems documentation, design development, configuration management, cost analysis, data administration, systems integration, and testing.
-- Comprehensive knowledge of government and industry communications and computer systems, concepts, principles, and practices relative to the systems security function. In-depth knowledge and ability sufficient to serve as the focal point for information security, providing authoritative advice, and assistance on complex, technical, controversial, and precedent setting matters to improve the Information Assurance program comprising many unique organizations and large, complex computer and communications security systems.
-- Knowledge and skill sufficient to develop and evaluate program documentation to include: mission need statements, operational requirements documents and support plans, specifications, proposals, and plans for systems operational test and evaluation of communications and information security systems.
-- Knowledge of information systems security principles and methods to design, develop, implement, and manage systems, networks, and data that ensure confidentiality, integrity, and availability.
-- Knowledge of methods for evaluating, implementing, and disseminating information systems security tools and procedures to ensure, protect, and restore information security systems and network services and capabilities
-- Knowledge of Security Awareness Training and Education (SATE) security training program, training materials, and sources-- Knowledge of information systems security certification and accreditation requirements to monitor and evaluate systems' compliance with those requirements.
-- Skill in oral and written communication to prepare and present reports, interpret policies and guidelines, provide advice and guidance to customers, and represent the organization in interactions with other organizations.
-- Ability to provide technical leadership on projects that require group efforts.
-- Knowledge of strapping and configuration options of cryptographic units.
Education
SUBSTITUTION OF EDUCATION FOR SPECIALIZED EXPERIENCE:
Ph.D.
or
equivalent doctoral degree
or
3 full years of progressively higher level graduate education leading to a Ph.D. or equivalent doctoral degree
You must provide transcripts or other documentation to support your Educational claims. To receive credit for Education, you must provide documentation of proof that you meet the Education requirements for this position.
Additional information
If you are a male applicant who was born after 12/31/1959 and are required to register under the Military Selective Service Act, the Defense Authorization Act of 1986 requires that you be registered or you are not eligible for appointment in this agency ( ).
**This position may be authorized a recruitment or relocation incentive for up to 25%. All incentives must be approved prior to the employee in processing.**
group id: DOAF
