IT Specialist (InfoSec)

Summary

This position is located in the Department of Health and Human Services, Health Resources and Services Administration, headquartered in Rockville, Maryland.

This announcement will close at 11:59 PM, on the day that 50 applications have been received or the closing date of the announcement, whichever comes first.

Learn more about this agency

Duties

Help

As an IT Specialist (InfoSec), you will use your knowledge and experience to optimize business results and customer experience by:

• Engineer, design and implement information security threat response tools to prevent, detect, analyze and respond to malicious activity and/or anomalies across on-premises, hybrid, and cloud environments, including infrastructureas-a-service (IaaS), platform-as-a-service (PaaS), and software-as-a-service (Saas).
• Develop and track security operations performance metrics (e.g., detection coverage, mean time to detect, mean time to respond, alert fidelity) to evaluate tool effectiveness, process maturity, and overall security operations performance, and provide data-driven recommendations for continuous improvement.
• Maintain security operations tools at optimal operating performance and provide senior-level engineering support including assessing tool effectiveness, detection quality, and operational impact using defined security operations metrics to inform optimization and modernization efforts.
• Perform threat detection engineering, analysis, and forensics. Develop, tune and implement threat detection analytics and CND content for on-premises and cloud environments, including identity-centric, API, and control-plane telemetry aligned with Zero Trust
• Receive and analyze network alerts from various sources within the enterprise and determine possible causes of such alerts.

Requirements

Help

Conditions of employment

• U.S. Citizenship required
• Males born after December 31, 1959 must be registered or exempt from Selective Service -
• Suitable for federal employment
• Meet time in grade restrictions by the closing date of the announcement
• Appointment will be subject to the applicant's successful completion of a background security investigation and favorable adjudication. All information concerning qualifications is subject to investigation.
• Documentation that you present for purposes of completing the Department of Homeland Security (DHS) Form I-9 will be verified through the DHS "E-Verify" System.
• All Federal employees are required to have Federal salary payments made by direct deposit to a financial institution of their choice.
• All qualification requirements must be met by the closing date.
• Financial disclosure statement may be required.
• Probationary (or trial) period may be required.

Qualifications

WHAT WE ARE LOOKING FOR

Basic Qualifications: The 2210 series has an Individual Occupational Requirement that must be met and can be viewed here. There is no Group Coverage Qualification Standard for this series.

BASIC REQUIREMENT : Individuals must have IT-related experience demonstrating each of the nine competencies listed below:

Attention to Detail - Is thorough when performing work and conscientious about attending to detail.

Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services.

Decision Making - Makes sound, well-informed, and objective decisions; perceives the impact and implications of decisions; commits to action, even in uncertain situations, to accomplish organizational goals; causes change.

Information Management - Identifies a need for and knows where or how to gather information; organizes and maintains information or information management systems.

Interpersonal Skills - Shows understanding, friendliness, courtesy, tact, empathy, concern, and politeness to others; develops and maintains effective relationships with others; may include effectively dealing with individuals who are difficult, hostile, or distressed; relates well to people from varied backgrounds and different situations.

Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately.

Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations.

Teamwork - Encourages and facilitates cooperation, pride, trust, and group identity; fosters commitment and team spirit; works with others to achieve goals.

Technical Competence - Uses knowledge that is acquired through formal training or on-the-job experience to perform one's job; works with, understands, and evaluates technical information related to the job; advises others on technical issues.NOTE: Your resume must support your response to this question. Failure to provide sufficient evidence of the required competencies in your resume may result in an ineligible rating.

Minimum Qualifications: You must have one year specialized experience to perform successfully the duties of the position. To be creditable, specialized experience must have been equivalent to at least the GS-13 grade level in the Federal service performing ALL of the following:

• Engineering, designing, integrating, and implementing enterprise security operations tools across on-premises, hybrid, and cloud environments, including SIEM, SOAR, EDR, IDS/IPS, and digital forensics platforms, ensuring alignment with defense-in-depth and Zero Trust principles.
• Evaluating, testing, and validating security technologies; translating functional requirements into technical solutions; developing use cases and test plans; overseeing installation, configuration, troubleshooting, and optimization of security tools; and ensuring interoperability across enterprise infrastructure, identity systems, and cloud environments.
• Developing, tracking, and analyzing security operations performance metrics to assess detection quality, operational effectiveness, and process maturity, and making data-driven recommendations to improve SOC capabilities.
• Developing, tuning, and implementing threat detection analytics and cyber defense content; conducting event correlation, adversary technique analysis, network traffic and packet analysis; identifying anomalous activity; and performing trend analysis to identify detection gaps and improve enterprise monitoring coverage.
• Conducting advanced incident response and digital forensics activities including evidence collection and imaging, malware analysis, validation of IDS alerts, identification of exploited vulnerabilities, and analysis of network, cloud, and identity telemetry to determine scope, impact, and remediation strategies.

Documenting experience: IN DESCRIBING YOUR EXPERIENCE, PLEASE BE CLEAR AND SPECIFIC. WE WILL NOT MAKE ASSUMPTIONS REGARDING YOUR EXPERIENCE. Qualifications are based on breadth/level of experience. In addition to describing duties performed, applicants must provide the exact dates of each period of employment (from MM/YY to MM/YY) and the number of hours worked per week if part time. As qualification determinations cannot be made when resumes do not include the required information, failure to provide this information may result in disqualification. Applicants are encouraged to use the USAJOBS Resume Builder to develop their federal resume.

Do not copy and paste the duties, specialized experience, or occupational application questionnaire from this announcement into your resume as that will not be considered a demonstration of your qualifications for this position.

In accordance with Office of Personnel Management policy, federal employees are assumed to have gained experience by performing duties and responsibilities appropriate for their official series and grade level as described in their position description. Experience that would not normally be part of the employee's position is creditable, however, when documented by satisfactory evidence, such as a signed memorandum from the employee's supervisor or an SF-50 or SF-52 documenting an official detail or other official assignment. The documentation must indicate whether the duties were performed full time or, if part time, the "percentage of times" the other duties were performed. It is expected that this documentation is included in the employee's official personnel record. In order to receive credit for experience in your resume that is not within the official series and grade level of your official position, you must provide a copy of the appropriate documentation of such experience as indicated above.

Experience refers to paid and unpaid experience, including volunteer work done through national Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; community; student; social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to gain employment. You will receive credit for all qualifying experience, including volunteer experience. If such experience is on a part-time basis, you must provide the average number of hours worked per week as well as the beginning and ending dates of the experience so it can be fully credited.

OPM Qualification General Policies Website

This announcement will close at 11:59 PM, on the day that 50 applications have been received or the closing date of the announcement, whichever comes first.

Education

This job does not have an education qualification requirement.

Additional information

THINGS YOU NEED TO KNOW

Federal agencies may request information regarding the vaccination status of selected applicants for the purposes of implementing other workplace safety protocols, such as protocols related to masking, physical distancing, testing, travel, and quarantine.

Incentives may be authorized; however, this is contingent upon multiple factors, including funds availability . If authorized, certain incentives may require you to sign a service agreement to remain in the Federal government for a period of up to 3 years. Note: This statement does not imply nor guarantee an incentive will be offered and paid. Incentives may include the following: moving expenses, recruitment or relocation incentive; student loan repayment, superior qualifications appointment, creditable service for annual leave for prior non-federal work experience or prior uniformed military service, etc.

• Bargaining Unit Position: No
• Research position: No
• Drug Screening Required: No

- Special Hiring Authorities for Veterans -

- Special Hiring Authorities for Military Spouses -

- People With Disabilities (Schedule A) -

Career Transition Assistance Program/Interagency Career Transition Assistance Program (CTAP/ICTAP): For information on how to apply as an CTAP/ICTAP eligible see To be well-qualified and exercise selection priority for this vacancy, displaced Federal employees must be rated at 85.0 or above on the rating criteria for this position.

Beginning January 1, 2010, agencies must seek prior approval from OPM before they can appoint a current or recent political appointee to a competitive or non-political excepted service position at any level under the provisions of title 5, United States Code. If you are currently, or have been within the last 5 years, a political Schedule A, Schedule C, or Non-career SES employee in the executive branch, you MUST disclose that to the Human Resources Office.

For Résumé Tips visit:

For Application Tips visit:

For additional information about USAJOBS visit the Help Center:

Additional selections may be made for similar positions across the Department of Health and Human Services (HHS) within the local commuting area(s) of the location identified in this announcement. By applying, you agree to have your application shared with any interested selecting official(s) at HHS. Clearance of CTAP/ICTAP will be applied for similar positions across HHS.

Candidates should be committed to improving the efficiency of the Federal government, passionate about the ideals of our American republic, and committed to upholding the rule of law and the United States Constitution.

Help

A career with the U.S. government provides employees with a comprehensive benefits package. As a federal employee, you and your family will have access to a range of benefits that are designed to make your federal career very rewarding. Opens in a new windowLearn more about federal benefits.

Review our benefits

Eligibility for benefits depends on the type of position you hold and whether your position is full-time, part-time or intermittent. Contact the hiring agency for more information on the specific benefits offered.