At the full performance level, employees commonly perform the following duties in the Information Security (INFOSEC) specialty:

• Develop policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data.
• Conduct risk and vulnerability assessments of planned and installed information systems to identify vulnerabilities, risks, and protection needs.
• Promote awareness of security issues among management and ensuring sound security principles are reflected in organizations’ visions and goals.
• Conduct systems security evaluations, audits, and reviews Develop systems security contingency plans and disaster recovery procedures.
• Develop and implement programs to ensure that systems, network, and data users are aware of, understand, and adhere to systems security policies and procedures.
• Participate in network and systems design to ensure implementation of appropriate systems security policies.
• Facilitate the gathering, analysis, and preservation of evidence used in the prosecution of computer crimes.
• Assess security events to determine impact and implementing corrective actions; and/or ensure the rigorous application of information security/ information assurance policies, principles, and practices in the delivery of all IT services.

Conditions of employment

• You must be a US Citizen.
• Males must be registered or exempt from Selective Service. www.sss.gov
• Selectee may be required to successfully complete a probationary period.
• Selectee must be determined suitable for federal employment.
• Selectee is required to participate in the direct deposit pay program.
• See special requirements section for additional requirements.

REQUIREMENTS:

Must be able to obtain an interim and/or final (e.g., confidential/secret/top secret, etc.) security clearance prior to entrance on duty AND must be able to maintain the required level of clearance while employed in the subject position. Failure to obtain and maintain the required level of clearance may result in the withdrawal of a job offer or removal.

Certification Requirements: Selectee must obtain and maintain in the first six months of hiring, Commercial IA certification as per DoD 8570 policy for IA Technical or IA Managerial Level I, II or III.

Qualifications

In order to qualify for this position, your resume must provide sufficient experience and/or education, knowledge, skills, and abilities, to perform the duties of the specific position for which you are being considered. Your resume is the key means we have for evaluating your skills, knowledge, and abilities, as they relate to this position. Therefore, we encourage you to submit a thorough resume that directly relates to this position.

MINIMUM QUALIFICATIONS

Individual must have IT-related experience demonstrating each of the following four competencies:

1) Attention to Detail - Is thorough when performing work and conscientious about attending to detail;

2) Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services;

3) Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately;

4) Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations; AND possess one or more years of progressively related specialized experience that is typically in or related to the work of the position to be filled and has equipped you with the particular knowledge, skills, and abilities, to successfully perform the duties at the levels outlined below;

OR possess qualifying education as listed below for the GS-09 and GS-11 levels.

GS-09: Credible specialized experience includes:  assisting in ensuring the confidentiality, integrity and availability of systems; assisting in implementing enterprise IT governance and management solutions; and assisting in applying operating systems patches and configuration for optimum security; OR You have a Master's degree or 2 full years of progressively higher level graduate education leading to a Master's or equivalent graduate degree from an accredited institution in computer science, engineering, information science, information systems management, mathematics, operations research, statistics, technology management, or a degree that provided a minimum of 24 semester hours in one or more of the fields identified above and required the development or adaptation of applications, systems, or networks.

GS-11: Credible specialized experience includes: experience in ensuring the confidentiality, integrity and availability of systems; implementing enterprise IT governance and management solutions; and experience in applying operating systems patches and configuration for optimum security; OR You have a PhD or 3 full years of progressively higher level graduate education leading to a PhD or equivalent graduate degree from an accredited institution in computer science, engineering, information science, information systems management, mathematics, operations research, statistics, technology management, or a degree that provided a minimum of 24 semester hours in one or more of the fields identified above and required the development or adaptation of applications, systems, or networks.

GS-12: Credible specialized experience includes: experience performing information assurance (IA) analysis and program management activities required to anticipate, assess, and minimize system vulnerabilities; identify security countermeasures to resolve existing or potential information assurance security problems; evaluate information systems and software design networks; advise management on information system design and implementation of new and improved IT applications.

GS-13: Credible specialized experience includes: developing policy and providing advice, consultation and guidance concerning a variety of IT program problems related to the confidentiality, integrity, and availability of IT systems and corresponding data; providing expert analysis of Information Assurance by analyzing vulnerabilities, conducting risk assessments and mitigation strategies; and providing system lifecycle solutions to improve the overall security posture; serving as an expert in the implementation, management, and sustainment for all Information Assurance and cyber security efforts and program areas.

GS-14: Credible specialized experience includes: performing work that involves a wide range of IT management activities that includes: providing policy and program direction for Information Technology, Information Assurance, and Information Management resources; implementing security and Information Assurance policies and IT programs; evaluating systems and network products for use; managing major technical information technology projects; evaluating Information Assurance policies and sensitive compartmentalized information; and developing procedures on information security issues.

PART-TIME OR UNPAID EXPERIENCE: You will receive credit for all qualifying experience, including volunteer and part time experience. You must clearly identify the duties and responsibilities in each position held and the total number of hours per week. Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional, philanthropic; religious; spiritual; community; student; social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. As part of the application process, you must complete and submit an occupational questionnaire.

To preview this questionnaire and determine if your experience matches the skills required for this position, click the following link: AssessmentLink.

Please follow all instructions carefully. Errors or omissions may affect your rating and/or appointment eligibility.

How you will be evaluated

You will be evaluated for this job based on how well you meet the qualifications above.

When the application process is complete, we will review your resume to ensure you meet the hiring eligibility and qualification requirements listed in this announcement. You will be rated based on the information provided in your resume and responses to the Occupational Questionnaire , along with your supporting documentation to determine your level of knowledge, skill and ability, related to the job requirements.

If, after reviewing your resume and supporting documentation, a determination is made that you inflated your qualifications and/or experience, your score may be adjusted to more accurately reflect your abilities or you may be found ineligible/not qualified.

Please follow all instructions carefully. Errors or omissions may affect your rating or consideration for employment.