Supervisory IT Cybersecurity - Security Operations Center Director

Come be a part of something big! Smart Minds, Cool Jobs and Awesome Rewards! Fueled by innovation, talent and ambition, the Air Force Civilian Service (AFCS) is seeking civilian professionals prepared to deploy war-winning capabilities for the United States Air Force.

The Air Force Civilian Service (AFCS) is looking for a full‑time Supervisory Information Technology (IT) Cybersecurity Specialist, Security Operations Center Director (GG‑2210‑14), to work at the 367th Cyberspace Operations Squadron (COS), Joint Base San Antonio – Lackland Air Force Base (AFB), in San Antonio, Texas.

This is a Cyber Excepted Service (CES) position implemented under Section 1599F, Title 10 United States Code (USC). A 3‑year probationary period is required for new Federal government appointments.

CES applies and documents Veterans’ Preference IAW Department of Defense (DoDI)  , Volume 3005.

Salary: $133,233 – $182,092 (based on experience). Relocation expenses may be paid. Recruitment and retention incentives may be available based on experience. This position can close at any time.

Qualifications / Requirements

In this position you will serve as the Security Operations Center (SOC) Director and serve as a first‑level supervisor, responsible for planning, directing, organizing, and exercising control over non‑supervisory employees assigned to 367 COS.

• Must be a U.S. Citizen
• Must be able to obtain & maintain a “Top Secret/SCI” Security clearance
• This position includes Department of War (DoW) Cyberspace work and requires foundational qualification requirements within 9 months of assignment to a cyberspace work role and resident qualification requirements within 12 months.
• This position is designated as a Drug Test Designated Position

• Expert knowledge of a wide range of IT principles, concepts, practices, and services to include technology related to DoW cybersecurity practices and Defensive Cyberspace Operations.
• Knowledge of the national intelligence community, Joint, DoW structure, organizations, mission/functions, inter-relationships, and operations.
• Knowledge of several critical cyber mission areas, including inspection, operations support, threat mitigation, counter infiltration, and threat emulation.
• Knowledge of safety and security regulations, practices, and procedures.
• Knowledge of security practices for ensuring the safeguarding of classified information.
• Skill in performing the cyber role of Network Infrastructure Specialist, Information Systems Security Manager and perform a range of cyber tasks supporting the organization’s mission, including engaging in network infrastructure activities, cyber planning, cyber operations, cyber threat analysis, and incident response, and change and compliance management.
• Skill in system administration functions of Microsoft Windows and of Linux/Unix based operating systems to know where artifacts/remnants of an intrusion may be uncovered for the purposes of working intrusions and quickly being able to triage incidents.
• Ability to plan, organize, and direct the functions and staff of a small to medium sized organization.

Highly Desired Experience

• Experience with Splunk, ArcSight, SIEM/SOAR, ELK, OR Arkime
• Wireshark
• Recorded Future
• Open Source Intelligence (OSINT)

You will be evaluated for this job based on how well you meet the qualifications above.

Your application package (resume, supporting documents) will be used to determine your eligibility, and qualifications.

Click the apply button to complete an application and upload resume (PDF or Word Doc) and/or additional documents (Transcripts, certifications, Vet Docs (DD214), SF-50).

To receive additional information about current and future job openings with AFCS via email notification, please subscribe at and sign up to “Get Career Updates.”

AFCS is Equal Opportunity Employer. U.S. citizenship required. Must be of legal working age.

#J-18808-Ljbffr