You will:

• Use cybersecurity laws, regulations, principles, methodologies, concepts, and best practices to define, implement, manage, and mature the day-to-day operations of the Enterprise Security Operations Center; and serve as the technical expert for the EPA’s implementation of the Department of Homeland Security’s Continuous Diagnostic and Mitigation (CDM) Program related specifically to the cybersecurity incident management and response initiatives.
• Use a variety of intelligence sources and security tools, tactics, and techniques to identify threats and security weaknesses; develop response and mitigation strategies for active threats in the enterprise; monitor, report, and track mitigation of security-related issues within the IT enterprise; and recommend risk-informed, cost effective improvements to system and enterprise stakeholders and senior leadership.
• Apply project management principles, tools, and techniques to ensure Security Operations Center (SOC)-specific and related IT/IT security projects are completed with expected outcomes and within the approved scope, schedule, and budget; and participate on integrated project teams as they relate specifically to the SOC or to the Office of Information Security and Privacy functions, roles, and responsibilities.

You will spend less than 25% of your work time on contracts, grants/cooperative agreements, and/or interagency agreements.

Conditions of employment

• Pre-employment drug testing is required and random testing thereafter.
• Position has education requirements--see Qualifications/Education section.
• You must submit a resume and required documents--see How to Apply section.
• EPA and non-EPA applicants must submit transcripts/course listings.
• You must be a U.S. citizen.

As required by Executive Order 14043, if you are selected, you will be required to be fully vaccinated against COVID-19 and submit documentation of proof of vaccination by 11/22/21, or before onboarding with the agency if after 11/22/21, except in limited circumstances. For information about COVID-19 workplace safety at EPA, as well as resources and health and safety guidance, visit COVID-19 Safe Federal Workplace.

If you are selected, you will be required to complete a Confidential Financial Disclosure form within 30 days of your first day of employment and annually thereafter.

If you are selected, you may be required to complete a one-year probationary period.

This position is designated as High Risk and requires a background investigation. Unless an appropriate background investigation is already on record with the Office of Personnel Management, you must undergo a background investigation. All conditions of the pre-employment security process must be met before an official letter of employment can be issued with a report for duty date.

You will be required to obtain and maintain a top-secret security clearance.

Qualifications

To qualify for this position, you must have either:
-IT-related experience demonstrating each of these four competencies: 1) Attention to Detail - Is thorough when performing work and conscientious about attending to detail; 2) Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services; 3) Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately; 4) Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations;
OR
-a bachelor's or higher degree from an accredited or pre-accredited college or university in computer science, engineering, information science, information systems management, mathematics, operations research, statistics, or technology management or degree that provided a minimum of 24 semester hours in one or more of the fields identified above and required the development or adaptation of applications, systems, or networks.

In addition to the basic requirements above, you must meet the following requirements:

To qualify for the GS-14 level, you need to have at least one year of full-time experience equivalent to the GS-13 level defined as serving as a technical expert on IT security-related matters; resolving and/or mitigating IT security-related issues within an organization; performing security reviews and assessments to identify risks, security gaps, and weaknesses; and advising senior leadership on IT security-related issues and recommendations for improvement. .

Your application package will be used to evaluate your competencies in the following areas: 

• Knowledge of cybersecurity laws, regulations, principles, methodologies, concepts, best practices, and ethics.
• Skill in applying incident response and handling methodologies, tools, tactics, and techniques.
• Skill in oral communication.
• Skill in applying various IT security disciplines, concepts, and methodologies to identify cost-effective and proactive cyber defenses to protect confidentiality, integrity, and availability of sensitive information.
• Knowledge of current and emerging cyber issues, threats, risks, and vulnerabilities.
• Knowledge of information security risk management principles, best practices, and methodologies.
• Knowledge of project management principles and methods sufficient to manage assigned projects, inform and support organizational strategic plans, and to advise senior management on complex IT security-related issues.
• Skill in identifying interrelationships, security impacts, and defense strategies across various IT disciplines.
• Skill in written communication.

Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional, philanthropic, religious, spiritual, community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience.

If you have part-time work experience, read this: EPA Announcement Policies and Procedures.

How you will be evaluated

You will be evaluated for this job based on how well you meet the qualifications above.

This position is being filled through the Office of Personnel Management’s government-wide direct-hire authority. Under the provisions of the direct-hire authority, category rating, veterans’ preference, and traditional rating and ranking of applicants do not apply. All eligible applicants will be forwarded to the selecting official for further consideration, and you may be subject to assessments during the selection process. If you are selected, we will review your resume and required documents to ensure you meet the qualification requirements.