IT CYBERSECURITY SPECIALIST (INFOSEC)

Summary This is a public notice flyer to notify interested applicants of anticipated vacancies. Applications will not be accepted through this flyer. Interested applicants must follow the directions in the "How to Apply" section of this flyer to be considered. There may or may not be actual vacancies filled from this flyer. Notice of Result letters will not be sent to applicants who respond to this flyer. Responsibilities You will evaluate data collected from a variety of cyber defense tools to analyze incidents and events at the system or network level in order to mitigate threats. You will coordinate with enterprise-wide cyber defense staff to validate network alerts. You will interface with various business entities to determine the nature of detected cyber events. You will detect, identify, and submit findings of possible attacks/intrusions, anomalous activities, and misuse activities and distinguish these incidents and events from benign activities. You will remain up-to-date on the latest security and cyber defense information in order to validate the security analysis and identification capabilities of the security technologies and tools. You will develop content for cyber defense tools. You will perform event correlation using information gathered from a variety of sources within the enterprise to gain situational awareness and determine the effectiveness of an observed attack. You will analyze identified malicious activity to determine weaknesses exploited, exploitation methods, and effects on system and information. Requirements Conditions of Employment Qualifications You are required to have information technology related experience in the federal service or private or public sector demonstrating the following four competencies, as defined: Attention to Detail - Is thorough when performing work and conscientious about attending to detail. . IT related experience demonstrating this competency include: Documenting and escalating incidents (including event's history, status, and potential impact for further action) that may cause ongoing and immediate impact to the environment. Experience using cyber defense tools to continually monitor and analyze system activity to identification of malicious activity. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services. IT related experience demonstrating this competency include: Providing feedback on network requirements, including network architecture, infrastructure, and routing. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. IT related experience demonstrating this competency include: Coordinating with enterprise-wide cyber defense staff to validate network alerts. Articulating and communicating work assignments, projects, problems to be solved, actionable events, milestones, and/or program issues under review, and deadlines and time frames for completion Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. IT related experience demonstrating this competency include: Providing timely detection, identification, and alerting of possible attacks/intrusions, anomalous activities, and misuse activities and distinguishing these incidents and events from benign activities. Applicants must have directly applicable experience that demonstrates the possession of knowledge, skills, abilities, and competencies necessary for immediate success in the position. Qualifying experience may have been acquired in any public or private sector job, but will clearly demonstrate past experience in the application of the particular competencies or knowledge, skills and abilities necessary to successfully perform the duties of the position. Such experience is typically in or directly relates to the work of the position to be filled. Qualifying experience would be demonstrated by: Monitoring and analyzeing network traffic through the use of packet analyzers and other cyber defense network tools to identify anomalous activity and potential threats to network resources. This position is within the Work Category Professional at Work Level Full Performance Series and Grade GG-2210-13. Additional qualifications information can be found from the following Department of Defense website: https://dodcio.defense.gov/Cyber-Workforce/CES.aspx Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., professional, philanthropic, religious, spiritual, community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. Education At a minimum, all CES employees in the Professional Work Category require a bachelor's degree or equivalent experience. Some groups in this category, however, may have a positive education requirement that cannot be replaced with experience, such as a requirement for a particular type or level of an academic degree. Additional Information This position is a DoD Cyber Excepted Service (CES) personnel system position in the Excepted Service under 10 U.S.C. 1599f. Additional vacancies may be filled. Certain incentives (such as Recruitment, Relocation or Student Loan Repayment) may be authorized to eligible selectees. A relocation incentive is generally a single payment intended to offset some of the relocation costs experienced by the selectee. A relocation incentive may be authorized. A tentative offer of employment will be rescinded if the selectee fails to meet the pre-employment requirements, including failure to report to any of the scheduled appointments. Federal annuitant information: The selection of an annuitant is subject to the Department of Defense and Department of the Navy policy on the employment of annuitants. Policy information may be found at: http://www.secnav.navy.mil/donhr/Documents/CivilianJobs/FedCivAnnuitants.pdf. Veteran's preference does not apply when selecting individuals under this specific hiring authority. However, if you claim veteran's preference, you will be required to submit supporting documentation with your application as described in the Required Documents section below. The Cyber Interagency Transfer Authority (CITA) permits movement of CES employees appointed under Section 1599f of Title 10 U.S.C. and excepted service employees appointed under Schedule A, Section 213.3106(b)(11) of Title 5 CFR, info cyber workforce positions in the competitive service and movement of competitive service employees into DoD Cyber Workforce positions within the Military Departments and Defense Agencies. CES employment and placement actions will be consistent with equal employment opportunity principles, including part 1607 of title 29, Code of Federal Regulations. The CES occupational structure aligns with the mission categories, work categories, and work levels to ensure positions are established and maintained to accomplish the DoD cyber mission, as prescribed in DoDD 8140.01. The CES occupational structure facilitates position classification procedures for aligning civilian cyber work to the appropriate pay band or grade range. Through the occupational structure, the CES allows for work to be assigned and positions to be organized in a way that best accomplishes the mission, while upholding the merit principle of equal pay for work of equal value. In accordance with DoDI 1400.25, Volume 3005, Section 3.15, all employees newly appointed to a CES position will serve a 3-year probationary period. Permanent and term employees currently serving in a probationary period in the competitive service or a probationary or trial period in the excepted service will complete the period as prescribed in their original conditions of employment in the new CES position if they transfer without a break in service or are promoted, demoted, or reassigned to a CES position. CES employees assigned to a grade within a work level will be advanced between grades in that work level in accordance with procedures in Paragraph 3.9.f.(2) of DoDI 1400.25-V3006 and DoDI 1400.25-V3005.