Clarification from the agency

ALL US CITIZENS. DIRECT HIRE AUTHORITY: This position is being filled using Direct-Hire Authority (5 CFR 337.201) for this occupation. This temporary position is being filled using the Direct-Hire Authority (5 CFR 337.201) to address the need for hiring additional staff in response to the coronavirus disease 2019 (COVID-19).

Videos

This position will support the Federal Government's response efforts to COVID-19.

Please read this public notice in its entirety prior to submitting your application.

Vacancies may not presently exist but may become available at any point during the opening period of this vacancy announcement. Applicant resumes will not be reviewed until there is a request to fill a vacancy. Your resume and any supporting documentation will be retained with other applicants and reviewed as vacancies occur.

You will not receive a notice regarding the status of your application other than the initial acknowledgement until a request is received to fill a position.

Once a request to fill a vacancy is received, the first 100 qualified and eligible candidates who applied will be considered for referral to the selecting official. Additional candidates will be referred based on hiring needs. Applicants will be notified about the status of their application, if referred and/or if all vacancies have been filled.

This is a temporary appointment not to exceed 1 year. This appointment may be extended up to a maximum of 1 additional year (24 months of total service).

The appointment to a Temporary position does not confer eligibility for promotion or reassignment to other positions or the ability to be non-competitively converted to permanent employment.

Work Schedule: Monday - Friday 8:00 a.m.-4:30 p.m.
Compressed/Flexible: May be available at discretion of supervisor
Telework: Available
Virtual: This is not a virtual position
Position Description Title/PD#: IT Cybersecurity Specialist (INFOSEC)/ PD17918TA
Relocation/Recruitment Incentives: Not Authorized
Financial Disclosure: Not Required
Physical Requirements: The work primarily sedentary in nature with some walking and travel to attend meetings and conferences away from the work site. No special physical demands are required to perform the work.

• Serve as an enterprise IT security representative in research industry public/private partnerships established to leverage advanced technologies with a focus on information systems, networks, and devices used to support research.
• Administer and monitor the division's implementation of the Risk Management Framework (RMF) steps and activities throughout system life-cycle.
• Support the implementation of information technology (IT) security controls, security authorization documents, and participates in system audits.
• Investigates cybersecurity incidents for IT networks, systems, and devices to identify possible break of security policies and/or other violations.

Conditions of employment

• You must be a U.S. citizen to apply for this job
• Subject to a background/suitability investigation
• Designated and/or random drug testing may be required
• Selective Service Registration is required for males born after 12/31/1959
• A complete application package; Resume, Transcripts, etc.
• Selected applicants will be required to complete an online onboarding process

Qualifications

To qualify for this position, applicants must meet all requirements by the closing date of this announcement, 12/31/2020.

Selective Placement Factor: This position includes a skill, knowledge, ability or other worker characteristic basic to -and essential for- satisfactory performance of the job. Selective Placement Factors are a prerequisite to appointment and represent minimum requirements for a position. Applicants who do not meet it are ineligible for further consideration. Evidence of the Selective Placement Factor must be reflected in your resume.

The Selective Placement Factor for this position is: Experience performing, security test, evaluations, and risk assessments on Information Technology Systems and networks within the Risk Management Framework.

You may qualify based on your experience, as described below:

For the GS-13 level:

Experience - Experience must be IT related; the experience may be demonstrated by paid or unpaid experience and/or completion of specific, intensive training (for example, IT certification), as appropriate. For all positions individuals must have IT-related experience demonstrating each of the four competencies listed below. The employing agency is responsible for identifying the specific level of proficiency required for each competency at each grade level based on the requirements of the position being filled.

1. Attention to Detail - Is thorough when performing work and conscientious about attending to detail.
2. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services.
3. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately.
4. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations.

AND

Specialized Experience: You must have one year of specialized experience equivalent to at least the next lower grade GS-12 in the normal line of progression for the occupation in the organization. Specialized experience includes participating in the design networks and IT systems to independently develop and implement information security policies and procedures to support Cybersecurity Research, Medical, and Special Purpose System enterprise wide other related security programs. Evaluating and recommending the acquisition, implementation and dissemination of IT security tools, policies, procedures and best practices to protect networks, systems, devices, and data.

Such experience is typically gained in the IT field or through the performance of work where the primary concern is IT.

There is no education substitution for the GS-13 level.

Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religions; spiritual; community; student; social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience.

Note: A full year of work is considered to be 35-40 hours of work per week. Part-time experience will be credited on the basis of time actually spent in appropriate activities. Applicants wishing to receive credit for such experience must indicate clearly the nature of their duties and responsibilities in each position and the number of hours a week spent in such employment. For more information on these qualification standards, please visit OPM's web site at http://www.opm.gov/qualifications/standards/indexes/alph-ndx.asp.

How you will be evaluated

You will be evaluated for this job based on how well you meet the qualifications above.

IN DESCRIBING YOUR EXPERIENCE, PLEASE BE CLEAR AND SPECIFIC. WE WILL NOT MAKE ASSUMPTIONS REGARDING YOUR EXPERIENCE. Applicants will be referred in alphabetical order.