Summary description:

The selected applicant be working on the Enforcement and Compliance History Online (ECHO) project as a key team member. ECHO is an integrated data warehouse and public access portal (echo.epa.gov) that supports transparency and targeting for the enforcement program. It has 75+ interfaces, 20+ data sources, and many reports. It is widely used by government and public users. We are seeking a collaborative, organized individual with an ability to contribute to our ECHO technical team. EPA will train the successful applicant on EPA data systems and information content. The job will require supporting the security and privacy protections needed to bring new data into ECHO, and implement of new e-reporting initiatives, in conjunction with technical staff and programmers. The successful applicant will be a part of a motivated and creative team that develops customer-focused and data-driven approaches to identify key environmental problems.

Job description:

You will assist our National Targeting Center in using information to solve environmental problems. You will help, Serve as the subject matter expert for cybersecurity for all matters relating to vulnerabilities and threats to the ECHO system. Serve as Information System Security Officer for ECHO, being the lead in maintaining the ECHO System Security Plan, Information System Contingency Plan, and other security documentation. Serve as cybersecurity lead during third party risk assessments of the ECHO system. Develop Security Impact Assessments as needed when major changes to ECHO are planned. Collaborate on review of operating system, application code, and database vulnerability scans and serve as lead ensuring that vulnerabilities addressed by support staff. Oversee and monitor IT security measures for ECHO and development of resolution of Plan of Action and Milestones (POA&Ms).

Eligibility factors: