IT CYBERSECURITY SPECIALIST (INFOSEC)

Summary Click on "Learn more about this agency" button below for IMPORTANT additional information. The primary purpose of this position is to serve as an experienced, Senior-skill-level defensive cyberspace operations technical expert and Cyberspace Protection Team (CPT) Mission Element crew member supporting tasked Service, Combatant Command and National Agency partners. Responsibilities DUTY 1 - Serves as a CPT mission lead, functional expert, and/or team member at the Senior experience level on a CPT conducting cyber defense analysis and security investigations on complex networks and system architectures. DUTY 2 - Serves as a CPT mission lead, functional expert, and/or team member at the Senior experience level conducting penetration testing and assessments of mission partner defense capabilities on complex networks and system architectures. DUTY 3 - Serves as a CPT mission lead, functional expert, and/or team member at the Senior experience level conducting missions to detect and remove unauthorized, malicious, or adversary presence from operational systems, networks, or enclaves in order to ensure reliability and availability of mission critical capabilities. DUTY 4 - Serves as a CPT mission lead, functional expert, and/or team member preparing mission documentation in accordance with DoD, Air Force, CYBERCOM, CCMD, 24 AF, and local standards. Requirements Conditions of Employment Qualifications This is a GG-13 position in the Defense Civilian Intelligence Personnel System (DCIPS). The GG-13 duties for the "Professional" work category are at the "Senior" work level and are equivalent to those at the GS-13 level. The selectee's salary will be set within the grade equivalent to a GS/GG grade based on the selectee's qualifications in relation to the job. In order to qualify, you must meet the specialized experience requirements described in the Office of Personnel Management (OPM) Qualification Standards for General Schedule Positions for the GS-2210, Information Technology (IT) Management Series (Alternative A)., For all positions individuals must have IT-related experience demonstrating each of the four competencies listed below. The employing agency is responsible for identifying the specific level of proficiency required for each competency at each grade level based on the requirements of the position being filled. 1. Attention to Detail - Is thorough when performing work and conscientious about attending to detail. 2. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services. 3. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. 4. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. In addition to meeting the basic requirement above, to qualify for this position you must also meet the qualification requirements listed below. EXPERIENCE REQUIRED: Your resume must reflect quality level experience which demonstrates the possession of the knowledge, skills, abilities and competencies necessary for successful job performance required for this position. Quality experience is experience that has equipped the applicant with the particular competencies/knowledge, skills, and abilities to successfully perform the duties of the position and is typically in or related to the work of the position to be filled. Examples of creditable experience include: road knowledge of IA and MA technologies such as COMSEC, COMPUSEC, EMSEC, and OPSEC, computer systems, digital communications systems, network protocols, and computer architectures; and computer security penetration tools and techniques. Note: Creditable experience may include previous military experience, experience gained in the private sector, or experience gained in another government agency. KNOWLEDGE, SKILLS AND ABILITIES (KSAs): Your qualifications will be evaluated on the basis of your level of knowledge, skills, abilities and/or competencies in the following areas: 1. Advanced knowledge of and skill in application of the concepts, and practices in two or more of the following areas: cyberspace security, computer programming, networking, computer operating systems (Windows, UNIX), malware forensics; threat analysis, operations research, artificial intelligence/machine learning; cyber incident handling and response, penetration testing, software/malware reverse engineering. the application of Information Assurance (IA), Mission Assurance (MA) and threat hunting technologies and techniques, analysis of computer systems, operating systems, network communication protocols, computer and network architectures and virtual machine (VM) technology; ability to analyze and correlate data in order to distinguish evidence of attacks or intrusions from normal activity. 2. Advanced knowledge of IA and MA technologies such as COMSEC, COMPUSEC, EMSEC, and OPSEC, computer systems, digital communications systems, network protocols, and computer architectures; and computer security penetration tools and techniques. Extensive knowledge and skill in one or more of the following areas: (a) computer operating systems (Unix, Windows, etc.) enterprise services, file systems, security, configuration and analysis; (2) network operations and security including net flows, protocols, PCAP, etc.; (3) computer programming and scripting; (4) malware identification and analysis; (5) system forensics. 3. Advanced knowledge and skill in identifying, analyzing, articulating and executing program goals and objectives, work processes, and administrative operations of the organization in support of major issues and operational challenges. 4. Skill in developing new or modified work methods, processes, or information protection procedures; and ability to develop and articulate technical direction and approaches to formulating interoperability plans, implementation plans, and contingency plans involving communications and connectivity between major command and control systems; proficiency in applying analytical and evaluative methods and techniques to issues or studies concerning the efficiency and effectiveness of program operations. 5. Ability to clearly and effectively discuss and present program objectives, managerial tasks, and technical information verbally and in writing to management and professional personnel at all levels within DoD and other government agencies within timelines prescribed by regulation or management. 6. Ability to effectively perform in both leadership and followership roles as part of teams comprised of military, federal civilian, and contract employees from within and outside of the employee's work center and unit. This includes effective interpersonal skills, as well as the ability to plan, organize work, and consult effectively with co-workers, as well as the ability to recognize and assume informal leadership and followership roles as appropriate to the team tasking and dynamics. Other significant facts continued: - Information Assurance Certification is a condition of employment. This position includes information assurance (IA) work as a paramount duty requirement. IA Technician Level III is required IAW the USCYBERCOM CPT JQR for this position (Cyber Threat Analyst, Host Analyst, Network Analyst). Per DOD 8570.01-M, the incumbent of this position must achieve the appropriate IA certification within six months of assignment of these duties. The point at which a member is deemed "assigned these duties" coincides with completion of requisite Initial Qualifications and Special Skills Training, but must be completed before being Combat Mission Ready (CMR) as IAT-III is a required for CMR. Failure to receive the proper IA certification, and/or CMR within 18 months of assignment may result in removal from this position and/or termination of employment. Education Other significant facts continued: - Duty Standards are derived from USCYBERCOM's CPT 2.0 Crew Construct. Supervisors will use the CPT crew work role JQR to develop position specific duty standards that align with the duties defined in this PD. While there are variances in the technical duties of the Network Analyst, Host Analyst, and Cyber Threat Analyst crew positions, they leverage their role-specific technical expertise/specialties to perform the same duties under this PD. For positions assigned to the National CPTs, the Network Analyst, Host Analyst and Cyber Threat Analyst crew position titles may vary in title, but are equivalent. This PD applies to all CPTs regardless of Service, COCOM, or National mission partner alignment. - This position is emergency essential (E-E). The incumbent must meet all requirements of E-E positions and may be required, as a condition of employment, to take a series of vaccinations and annual boosters to immunize against anthrax and other diseases. During a crisis, the incumbent or designated alternate must continue to perform the E-E duties until relieved by proper authority. The same will be required to take part in readiness exercises. This position can not be vacated during a national emergency or mobilization without seriously impairing the capability of the organization to function effectively. This meets the criteria of an E-E position and requires that the incumbent or designated alternate to be removed from any military recall status. - The primary difference between the 12 and 13 level positions are the required experience and knowledge. The 12 position loosely aligns with the CMF experience model definition of "Basic" while the 13 position aligns more closely with the "Senior" level experienced crew member qualification. This does not mean that an individual who attains the crew qualification of Senior is promoted to a 13 position or that the 12 position is converted to a 13 position. The Basic, Senior and Master experience designations align with the base-line experience required of an individual occupying a specific position on the crew UMD. The crew rating of Basic, Senior and Master reflects and individual's experience attained which can be more than is required of the actual PD they occupy. PD is based on mission needs; the experience rating is a reflection of an individual's technical experience. - This position is designated as a key position IAW AFI 36-507. Duties of this position are essential to the accomplishment of wartime/contingency operations. Incumbents of key positions must be removed from their military recall status if alternative for filling of the position during an emergency are not available." - Compliance with Cyber Mission Force (CMF) training specified in the USCYBERCOM Cyber Mission Forces Training and Readiness Manual; and applicable higher headquarters guidance memoranda for Cyber-Crew Training, Standardization and Evaluation, and Cyberspace Operations, is a condition of employment. Depending on experience and skill levels, portions of the CMF training may require incumbent to perform an extended TDY for a period of 3 to 6 months or longer. The incumbent must achieve and maintain appropriate CMF requirements as specified in Job Qualification Record (JQR) and attain Combat Mission Ready (CMR) certification within 18 months of assignment of these duties. achieve full Mission Readiness (MR) by the 18 month point through no fault of his/her own. Delays due to an individual's course/certification failures and an individual's failure to plan adequate time to meet all requirements cannot be waivered. The Group Commander's waiver cannot extend beyond the 30-month point. Failure to achieve and maintain CMF requirements may result in removal from this position. If an employee obtains CMR but later loses his/her certification and is unable to regain certification, or the employee repeatedly regains and subsequently loses CMR in less than three-years' time, the employee will be considered in violation of the CMR condition of employment and will be removed from this position and/or processed for termination of employment.. ADDITIONAL INFORMATION: This position is a Defense Civilian Intelligence Personnel Systems (DCIPS) position implemented under Section 504, Title V of Public Law 99-569, Intelligence Authorization Act for Fiscal Year 1987, as codified in Sec 1601, Chap 83 of Title 10 United States Code which sets forth Air Force policies and procedures for DCIPS. This position is in the Excepted Service. DoD Components with DCIPS positions apply Veterans' Preference to preference eligible candidates as defined by Section 2108 of Title 5 USC, in accordance with the procedures provided in DoD Instruction 1400.25, Volume 2005, DCIPS Employment and Placement. If you are a veteran claiming veterans' preference, as defined by section 2108 of Title 5 U.S.C., you must submit documents verifying your eligibility with your application package. For additional information on DCIPS, click here PART-TIME OR UNPAID EXPERIENCE: Credit will be given for appropriate unpaid and or part-time work. You must clearly identify the duties and responsibilities in each position held and the total number of hours per week. VOLUNTEER WORK EXPERIENCE: Refers to paid and unpaid experience, including volunteer work done through National Service Programs (i.e., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community; student and social). Volunteer work helps build critical competencies, knowledge and skills that can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience. Additional Information Employed Annuitants (Reemployed Annuitants): Applicants in receipt of an annuity based on civilian employment in the Federal Service are subject to the DoD Policy on The Employment of Annuitants. Click here for more information. Current Federal Civilian employees may apply for temporary and term positions and if selected, a break in service may be required prior to appointment to the position. 120-Day Register: This announcement may result in a 120-day register that may be used to fill like vacancies for 120 days after the closing date. Applicants may be referred for consideration as vacancies occur. Direct Deposit: All federal employees are required to have direct deposit. Disabled veteran leave is available to a Federal employee hired on/after 5 Nov 2016, who is a veteran with a service-connected disability rating of 30% or more. For more information, click here. If you have questions regarding this announcement and have hearing or speech difficulties click here. Selectees who physically reside permanently in the U.S., the Commonwealth of Puerto Rico or Northern Mariana Islands, and the Possessions of the U.S., during the entire recruitment process (application, selection, and acceptance of a formal job offer) and selected for employment in the foreign area are eligible to receive certain foreign area benefits such as: Living Quarters Allowance (LQA) or government quarters, Post Allowance, Home Leave, etc. (subject to approval) Selectees who physically reside outside the U.S., the Commonwealth of Puerto Rico or Northern Mariana Islands, and the Possessions of the U.S., during any step of the recruitment process (application, selection, and acceptance of a formal job offer) will have foreign area benefits eligibility be determined on a case by case basis.