Clarification from the agency

Internal Permanent Air Force Employees Only

• In a Career Broadening capacity, provides technical guidance and activities to the J631.
• Serves as a Career Broadener, leads and personally contributes expertise to preliminary analyses of issues concerning the J63 operations and to conduct direct defensive cyber operations across the command.
• In a Career Broadening capacity, serves as a lead technical oversight of command proactive defensive cyber operations.
• As a Career Broadener, serves as a technical and subject matter expert and principal advisor.

Conditions of employment

• U.S. Citizenship is required.
• Mobility is a condition of employment. Employee must sign AF-wide mobility agreement.
• Employee must obtain and maintain a TOP SECRET/SPECIAL COMPARTMENTED INFORMATION (TS/SCI) security clearance as a condition of employment.
• PCS travel expenses will be paid IAW JTR and AFMAN 36-606.
• PCS cost will be paid IAW Career Broadening Policy under this agreement.
• Career Broadening positions are managed by AFPC/DP2Z and are centrally funded.
• Positions are established specifically to provide developmental experience designed to broaden the skills and/or enhance the leadership perspective of a high-potential, mid-level manager.
• Career Broadening also provides training and developmental opportunities at various organizational levels.
• These assignments offer the qualified candidate a unique assignment in that the candidates brings certain experience to the assignment while gaining new experiences in a different work environment.
• TEMPORARY PROMOTION: If the position is filled as a temporary promotion, upon completion of the career broadening assignment, the temporary promotion may lead to permanent promotion without further competition.
• This position has been designated as a Testing Designated Position (TDP). Incumbent is required to: (a) refrain from the use of illegal drugs, and (b) if requested, submit to urinalyses testing.
• Work may occasionally require travel away from the normal duty station on military and/or commercial aircraft.
• The employee may be required to work other than normal duty hours which may include evenings, weekends, and/or holidays.
• Recall to duty may be a requirement of this position.
• Overtime and/or emergency overtime may be required.
• Information Assurance (IA) Certification is a condition of employment. Per DoD 8570.01-M, the incumbent of this position must achieve the appropriate IA certification within six months of assignment of these duties. A waiver may be granted.
• Males must be registered for Selective Service; see www.sss.gov.
• Disclosure of political appointments.

Qualifications

SPECIALIZED EXPERIENCE: Individuals must have IT-related experience demonstrating each of the four competencies listed below:

1. Attention to Detail - Is thorough when performing work and conscientious about attending to detail.
2. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services.
3. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately.
4. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations.

AND

One year of specialized experience which includes experience that has equipped the applicant with the particular competencies/knowledge, skills, and abilities to successfully perform the duties of the position. Such experience is typically gained in the IT field or through the performance of work where the primary concern is IT. This definition of specialized experience is typical of work performed at the GS-13 grade/level or equivalent in the federal service.

FEDERAL TIME-IN-GRADE (TIG) REQUIREMENT FOR GENERAL SCHEDULE (GS) POSITIONS: Applicants must have served at least 52 weeks at the GS-13 or higher grade (or equivalent in an alternate pay system) within the Federal Civil Service to be considered for referral. TIG applies if you are in a current GS position or held a GS position within the previous 52 weeks.

KNOWLEDGE, SKILLS AND ABILITIES (KSAs): Your qualifications will be evaluated on the basis of your level of knowledge, skills, abilities and/or competencies in the following areas:

1. Knowledge of a full range of IT and cybersecurity principles, concepts, and methods as well as risk management processes (e.g., methods for assessing and mitigating risk), specific operational impacts of cybersecurity lapses and their application to the organization's core mission processes, and emerging technologies that have potential for exploitation by adversaries sufficient to provide expert technical advice to management on a wide range of complex IT issues, to manage the evaluation of risks and vulnerabilities, to oversee the development of mitigating improvements, and to manage the dissemination of IT security tools and procedures.
2. Knowledge of computer networking concepts and protocols (e.g., TCP/IP, Dynamic Host Configuration, Domain Name System (DNS), and directory services); network security methodologies and architecture concepts including topology, components, and principles (e.g., application of defense-in depth); and related computer disciplines such as systems, communication lines, intrusion detection systems, firewalls, and routers as they relate to computer network defense (CND) operations and environments.
3. Knowledge of cyber threats, vulnerabilities, and attack methodologies and stages (e.g., foot printing and scanning, enumeration, gaining access, escalation or privileges, maintaining access, network exploitation, covering tracks); threat types and capabilities; different classes of attacks (e.g., passive, active, insider, close-in, distribution); and system and application threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, Procedural Language/Structured Query Language [PL/SQL] and injections, race conditions, covert channel, replay, return-oriented attacks, and malicious code).
4. Knowledge of complex cyber forensics, cyber threat, and intrusion detection concepts, disciplines, methodologies, and techniques for detecting host and network-based intrusions via intrusion detection technologies sufficient to oversee the development of countermeasures to classified and unclassified computer network and system attacks.
5. Knowledge of advanced incident management, analysis, and response concepts and procedures; incident categories, incident responses, and timelines for responses; incident response and handling methodologies; and computer security incident response processes including countermeasure mitigation strategies, malware analysis, network traffic analysis, and network system analysis/forensics.
6. Knowledge of vulnerability management processes and procedures; vulnerability categories, responses, and timelines for response; as well as computer network defense and vulnerability assessment tools (commercial and open source) and their capabilities, network traffic analysis tools, identification and authentication technologies, Security Information and Event Management (SIEM) tools, firewalls, malicious code identification tools, intrusion detection/prevention tools, proxies, email security filters, and vulnerability scanning tools among other technologies designed to protect systems and networks.
7. Skill in conducting technical and non-technical risk and vulnerability assessments, in administering and utilizing vulnerability scanning tools to protect systems and networks; in using network analysis tools to identify vulnerabilities; and in recognizing and categorizing types of vulnerabilities and associated attacks.
8. Ability to communicate effectively, clearly, interpret, implement, and apply Federal cybersecurity and cyber defense laws, policies, regulations, procedures, standards, and compliance measures to command information systems and to the development of policy, plans, and strategies in support of cyber activities and the DoD Information Network (DODIN) security posture.

PART-TIME OR UNPAID EXPERIENCE: Credit will be given for appropriate unpaid and or part-time work. You must clearly identify the duties and responsibilities in each position held and the total number of hours per week.

VOLUNTEER WORK EXPERIENCE: Refers to paid and unpaid experience, including volunteer work done through National Service Programs (i.e., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community; student and social). Volunteer work helps build critical competencies, knowledge and skills that can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience.

How you will be evaluated

You will be evaluated for this job based on how well you meet the qualifications above.

Your application package (resume, supporting documents, and responses to the questionnaire) will be used to determine your eligibility, qualifications, and quality ranking for this position. Please follow all instructions carefully. Errors or omissions may affect your rating or consideration for employment.

Your responses to the questionnaire may be compared to the documents you submit. The documents you submit must support your responses to the online questionnaire. If your application contradicts or does not support your questionnaire responses, you will receive a rating of "not qualified" or "insufficient information" and you will not receive further consideration for this job.

Applicants who meet the requirements for and apply as a non-competitive eligible that meet minimal qualifications and other requirements of this position, will be given consideration as a non-competitive candidate and will be referred unless blocked by an individual with priority/preference.

Applicants who disqualify themselves will not be evaluated further.

APPRAISALS/AWARDS: Hiring Managers use objective methods and consider previous performance appraisals and awards in the selection process. Current Federal Civilian employees should list any relevant performance related rating and/or awards in your resume.