Clarification from the agency

Current permanent employees of DoD, Former permanent federal employees, DoD Military Spouse Preference (MSP) eligibles, and VEOA eligibles.

• You will serve as the on-site Information Systems Security Manager (ISSM).
• You will implement Information System/Information Assurance solutions for the operation, maintenance, and use of Undersea Warfighting Development Center (UWDC) information technology systems.
• You will conduct research, review, and analysis of systems configuration.
• You will ensure systems meet all established IA requirements.
• You will review and approve access requests to a variety of networks and systems.
• You will plan, prepare, and conduct risk and vulnerability assessments.
• You will review systems security contingency plans and recovery procedures and participate in systems security evaluations, audits, and reviews.
• You will conduct and direct scan and analysis of system and network vulnerability.
• You will identify and manage risks associated with UWDC applications and mission goals for current and future hardware, network, security, infrastructure, commercially available solutions, and technological advances.
• You will prepare and brief technical report status using project manager, configuration management, network diagrams, and Microsoft Office product suite.

Conditions of employment

• Must be a US Citizen.
• Must be determined suitable for federal employment.
• Must participate in the direct deposit pay program.
• New employees to the Department of the Navy will be required to successfully pass the E-Verify employment verification check. To learn more about E-Verify, including your rights and responsibilities, visit e-verify.gov
• Generally, current federal employees applying for GS jobs must serve at least one year at the next lower grade level. This requirement is called time-in-grade. Time-in-grade requirements must be met by the closing date of this announcement.
• Within the Department of Defense (DoD), the appointment of retired military members within 180 days immediately following retirement date to a civilian position is subject to the provisions of 5 United States Code 3326.
• Males born after 12-31-59 must be registered for Selective Service.
• Per E.O. 14043, selectee(s) must be fully vaccinated for COVID-19 by date of employment except in limited circumstances where an exemption is approved due to a disability or sincerely held religious beliefs.
• You will be required to obtain and maintain an interim and/or final security clearance prior to entrance on duty. Failure to obtain and maintain the required level of clearance may result in the withdrawal of a job offer or removal.
• Successful completion of a pre-employment drug test (including marijuana) is required. A tentative offer of employment will be rescinded if you fail to report to the drug test appointment or fail the test. You will be subject to random testing.
• This position may require travel from normal duty station to CONUS and OCONUS and may include remote or isolated sites. You must be able to travel on military and commercial aircraft for extended periods of time.
• This position is subject to work an uncommon tour, including nights, weekends, and holidays to meet mission requirements. Overtime or night differential pay and/or unusual duty hours may be required.
• The position is not eligible for Telework since physical presence is required on site (NE001).
• You will be required to obtain and maintain a U.S. Passport.
• This position has been designated as a Cyber IT/Cybersecurity Workforce (CSWF) position in specialty area 722 proficient level Intermediate and you must maintain qualifications IAW on the DON CSWF Program Requirements.
• You must participate in a continuous learning program as described in SECNAVINST 5239.20A and SECNAV M-5239.2.
• An annual 20 hour minimum of Cyber Workforce related continuous learning must be documented in a current IDP signed by employee and supervisor.
• You must obtain the required credentials with 12 months of appointment and maintain those credentials as described in SECNAV M-5239.2.

Qualifications

To qualify for the IT SPECIALIST (INFOSEC), GS-2210-12, your resume must demonstrate at least one full year (52 weeks) of specialized experience equivalent to the level of difficulty and responsibility to that of the GS-11 grade level or pay band in the Federal service or equivalent experience in the private or public sector. Specialized experience and the required four competencies must demonstrate the following:

GS-12:

• Experience assessing the security effectiveness of installed systems based on analysis of reported security problems.
• Experience implementing modifications to minimize vulnerabilities, troubleshooting security threats and vulnerabilities in response to incident reports, identifying and isolating problem sources, and recommending solutions or correcting problems.
• Experience providing a total infrastructure protection environment; systems security certification and accreditation requirements and processes including the Risk Management Framework (RMF) and Federal information systems security protocols sufficient to integrate information systems security with other security disciplines.
• Experience certifying systems or network accreditation and ensuring coordination and/or collaboration between all parties on security activities.
• Experience applying methods for evaluating, implementing, and disseminating IT security tools and procedures to include configuration management and change management policies and procedures.
• Experience in project management and team building in order to plan, direct and organize work products by detennining priorities and allocating resources.
• Experience in IT security certification and accreditation requirements; life cycle management; network administration, operations, and protocols; and computer forensics principles sufficient to: develop, implement, and coordinate activities designed to ensure, protect, and restore IT systems, services, and capabilities.
• Experience monitoring and evaluating systems' compliance with IT security requirements to include the Risk Management Framework (RMF) and DISA Security Technology Implementation Guidelines (STIGs).
• Experience providing advice and guidance in implementing IT security policies and procedures in the development and operation of network systems to a wide variety of internal and external computer customers up to and including Flag officers and SES managers to ensure proper protection of evidence used in investigating computer crimes.
• Experience applying IT security concepts, principles, methods, and practices.
• Experience installing, configuring, and maintenance of Unix and Windows operating systems, server hardware components, advanced data storage solutions, network and telecommunications issues in a production support environment. Ability to use information technology tools to define performance metrics and to monitor their implementation;
• Experience using methods and techniques for systems testing and evaluation.
• Experience evaluating new and emerging information technologies and/or industry trends and their applicability to the requirements for maintaining a secure computing environment for UWDC.
• Experience and knowledge of acquisition management policies and procedures and budgeting principles as they apply to IT procurements.
• Experience performing cost-benefit analysis, analytical methods and practices and project management principles and methods.
• Experience applying analytical and evaluative methods accompanied by a thorough understanding of how regulatory programs are administered, in order to select and apply appropriate program evaluation and measurement techniques to ensure compliance with pertinent information assurance and business rules, policy, and regulations.
• Experience applying oral and written communication techniques sufficient to plan and carry out difficult and complex assignments and develop new methods, approaches, and procedures.
• Experience interpreting IT policies, standards, and guidelines.
• Experience analyzing and recommending resolution of complex issues affecting information system security management and operations; evaluate and recommend adoption of new or enhanced approaches to delivering IT services
• Experience evaluating proposals for the secure acquisition of IT products or services, prepare and present report, representing the organization in interactions with other organizations, and providing technical leadership on group projects.

AND Experience must also demonstrate the following competencies:

• Attention to Detail - Is thorough when performing work and conscientious about attending to detail.
• Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services.
• Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately.
• Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations.

Additional qualification information can be found from the following Office of Personnel Management website: https://www.opm.gov/policy-data-oversight/classification-qualifications/general-schedule-qualification-standards/2200/information-technology-it-management-series-2210-alternative-a/

Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., professional, philanthropic, religious, spiritual, community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment.

How you will be evaluated

You will be evaluated for this job based on how well you meet the qualifications above.

In order to qualify for this position, your resume must provide sufficient experience and/or education, knowledge, skills, and abilities to perform the duties of the specific position for which you are being considered. Your resume is the key means we have for evaluating your skills, knowledge, and abilities as they relate to this position. Therefore, we encourage you to be clear and specific when describing your experience.

When the application process is complete, we will review your resume to ensure you meet the hiring eligibility and qualification requirements listed in this announcement. You will be rated based on the information provided in your resume and responses to the Occupational Questionnaire, along with your supporting documentation to determine your ability to demonstrate the following competencies:

• CYBERSECURITY
• INFORMATION TECHNOLOGY CONFIGURATION MANAGEMENT
• INFORMATION TECHNOLOGY POLICY AND PLANNING

You should list any relevant performance appraisals and incentive awards in your resume as that information may be taken into consideration during the selection process. If selected, you may be required to provide supporting documentation.

If after reviewing your resume and supporting documentation, a determination is made that you inflated your qualifications and/or experience, your score may be adjusted to more accurately reflect your abilities or you may be found ineligible/not qualified.

Please follow all instructions carefully. Errors or omissions may affect your rating or consideration for employment.

All eligibility, qualifications, and time-in-grade requirements must be met by the closing date of this announcement.