Clarification from the agency

U.S. Citizens

• You will serve as a IT Cybersecurity Specialist assigned as a penetration testing team member within the Inspections Threat Element Branch, Operations Division, Office of Compliance and Assessment (OCA), U.S. Fleet Cyber Command (FLTCYBERCOM).
• You will assess threats and vulnerabilities through testing and evaluation activities, such as network penetration testing, web application security testing and conducting social engineering exercises (e.g., phishing, baiting, tailgating, etc.).
• You will conduct system breaches to test security weaknesses and probe/exploit system vulnerabilities and design tests and tools to breach security-protected applications and networks.
• You will apply cyber collection, environment preparation and engagement expertise to enable new exploitation and/or continued collection operations, or in support of mission requirements.
• You will follow a systematic methodology to assess ability of systems/networks to withstand sophisticated adversaries, identify/demonstrate attack vectors and their impacts to provide risk determinations and provide mitigation/remediation strategies.
• You will maintain knowledge of system architecture designs, current threats and methodologies, adversary tactics, techniques and procedures (TTPs) to conduct sophisticated penetration testing of configurations, pathways and interactions.
• You will perform penetration testing on both targeted and general objectives for internal and external security assessments.
• You will measure cybersecurity compliance by conducting assessments of internal and external threats and vulnerabilities by applying ethical hacking principles, tools and techniques based on comprehensive information security principles.
• You will test networks with automated, remotely executed, and manual methods to examine components, their interfaces, to evaluate compliance with access control mechanisms and security protocols.
• You will conduct comprehensive assessments of management, operational and technical security controls, and control enhancements employed within or inherited by an information technology (IT) system to determine overall effectiveness of the controls.
• You will support the documentation, validation, assessment, and authorization processes necessary to assure that existing and new IT systems meet the organization's cybersecurity and risk requirements.
• You will ensure appropriate treatment of risk, compliance, and assurance from internal and external perspectives, and identify vulnerabilities and their associated exploit ability and impacts to operators? missions.
• You will perform assessments of systems and networks within the environment or enclave and identifies where those systems/networks deviate from acceptable configurations, enclave policy, or local policy.
• You will ensure systematic process in assessing the integrity and availability of networks, software applications, architectures and configurations, and IT operational parameters.
• You will collect, draft, and present analysis of findings from inspections and completion of documentation to finalize inspection reports, reporting and archival of data as applicable.
• You will Identify and clarify all vulnerabilities discovered during site visits or remote reviews, prepare applicable mitigation recommendations, and provide gap analyses to address evaluation of technology, operations and personnel practices.

Conditions of employment

• Must be a US Citizen.
• Must be determined suitable for federal employment.
• Must participate in the direct deposit pay program.
• New employees to the Department of the Navy will be required to successfully pass the E-Verify employment verification check. To learn more about E-Verify, including your rights and responsibilities, visit e-verify.gov
• Within the Department of Defense (DoD), the appointment of retired military members within 180 days immediately following retirement date to a civilian position is subject to the provisions of 5 United States Code 3326.
• Males born after 12-31-59 must be registered for Selective Service.
• Per the preliminary nationwide injunction on E.O. 14043, COVID-19 vaccinations will not be implemented or enforced. For more information on vaccine status and workplace safety protocol requirements see Additional Information below.
• You will be required to obtain and maintain an interim and/or final TOP SECRET/SCI security clearance prior to entrance on duty. Failure to obtain and maintain the required level of clearance may result in the withdrawal of a job offer or removal.
• This position is designated as a Cyber IT/Cybersecurity Workforce position. You must obtain and maintain the credentials as described in SECNAV M-5239.2 for specialty area 612 and 121 within 12 months of appointment.
• Successful completion of a pre-employment drug test (including marijuana) is required. A tentative offer of employment will be rescinded if you fail to report to the drug test appointment or fail the test. You will be subject to random testing.
• This position may require travel from normal duty station to CONUS and OCONUS and may include remote or isolated sites. You must be able to travel on military and commercial aircraft for extended periods of time.
• You will be required to obtain and maintain a U.S. Passport.

Qualifications

Applicants must have directly applicable experience that demonstrates the possession of knowledge, skills, abilities, and competencies necessary for immediate success in the position. Qualifying experience may have been acquired in any public or private sector job, but will clearly demonstrate past experience in the application of the particular competencies or knowledge, skills and abilities necessary to successfully perform the duties of the position. Such experience is typically in or directly relates to the work of the position to be filled. You must have IT-related experience demonstrating each of the four competencies listed below:

1. Attention to Detail - Is thorough when performing work and conscientious about attending to detail. Examples of experience demonstrating this competency include: Assessing risk to the mission by evaluating threats to and vulnerabilities found within information systems (IS), networks, software applications, programs, and data sources.

2. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services. Experience demonstrating this competency include: Establishing and maintaining productive working relationships with internal and external contacts.

3. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. Examples of experience demonstrating this competency include: Providing guidance and articulating recommendations for implementing cybersecurity policies and procedures and other feasible methods to mitigate risk and prevent compromise of information, systems and processes.

4. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. Examples of experience demonstrating this competency include: Conducting system breaches to test security weaknesses and exploit system vulnerabilities.

In addition to my experience demonstrating the four competencies above, I have qualifying experience such as:

-Experience applying analytical methods and skills used to evaluate, implement, and disseminate IT/cybersecurity concepts, tools and procedures.
-Experience identifying gaps in technical capabilities and developing or recommending analytic approaches or solutions to problems and situations for which information is incomplete or for which no precedent exists.
-Experience examining components and their interfaces to evaluate compliance with access control mechanisms and security protocols by testing networks with automated, remotely executed and manual methods.
-Experience analyzing computer networking concepts and protocols, network security methodologies, cybersecurity and privacy principles to identify cyber threats and vulnerabilities.


This position is within the Work Category PROFESSIONAL at Work Level FULL PERFORMANCE, Series and Grade GG-2210-12.

Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., professional, philanthropic, religious, spiritual, community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment.

How you will be evaluated

You will be evaluated for this job based on how well you meet the qualifications above.

In order to qualify for this position, your resume must provide sufficient experience and/or education, knowledge, skills, and abilities to perform the duties of the specific position for which you are being considered. Your resume is the key means we have for evaluating your skills, knowledge, and abilities as they relate to this position. Therefore, we encourage you to be clear and specific when describing your experience.

As vacancies occur, the Human Resources Office will review your resume to ensure you meet the hiring eligibility and qualification requirements listed in this flyer. You will be rated based on the information provided in your resume, along with your supporting documentation.

If selected, you may be required to provide additional supporting documentation.

If after reviewing your resume and supporting documentation, a determination is made that you inflated your qualifications and/or experience, you may be found ineligible/not qualified.

Please follow all instructions carefully. Errors or omissions may affect your rating or consideration for employment.

All qualification requirements must be met before being considered for any vacancies.