Clarification from the agency

Status candidates and non-competitive eligibles.

The major duties of the position are:

As a recognized expert in the field of information technology (IT) security, provides authoritative guidance related to the FRTIB IT security program. In this capacity the duties and responsibilities include, but are not limited to, the following:

• Engages with U.S. Cert, Department of Homeland Security to receive guidance, awareness, mitigation and reporting. Reviews forensics to assess impact of incidents to operational services and devises mitigation strategies. Oversees the SOC operations and deliverables. Oversees security incident responses and mitigations.
• Develops policies and procedures to ensure reliability and accessibility of information systems and to prevent and defend against unauthorized access to systems, networks, and data. Develops key strategic recommendations to management to integrate security best practices associated with network preventive and defensive activities.
• Promotes awareness of security issues among management and ensures sound security principles are reflected in the organization's vision and goals. Conducts security evaluations of tools and ensures appropriate stakeholders have sufficient access to facilitate comprehensive reviews of enterprise systems.
• Collaborates with key stakeholders (external and internal partners) to ensure the agency maintains an effective channel of communications to adequately address potential and real threats, both internal and external. Supports the creation of reports to respond to senior executives and external parties, as required.
• Assesses security events to determine impact and corrective action measures needed to secure enterprise assets. Ensures agency procedures and policies are followed to manage and oversee activities to close out security events and incidents. Assists in the development of key dashboard to provide a comprehensive picture of current activities within the enterprise.
• Supports the management team by conducting detailed reviews of audit requirements to make certain the agency is able to collect and store an appropriate level of audit logs for forensic review and investigative activities. Ensures chain of custody requirements are implemented during all forensic analysis. Effectively oversees the development, maintenance, and storage of all reports related to security events, incidents and investigative analyses.
• Supports security activities that require the agency to respond to alerts, anomalous behaviors, and federal mandates (e.g. Binding Operational Directives) to ensure the agency is able to take sufficient action to protect the confidentiality, integrity, and availability of IT systems and data.
• Performs other duties and responsibilities as assigned.

Conditions of employment

U.S. citizenship is required.

All qualification requirements must be met by 01/18/2022. Your application package will not be considered if it is missing any of the required documents listed under the "Required Documents" tab.

Probationary Period. One-year probationary period may be required.

Selective Service. If you are a male applicant born after December 31, 1959, you must certify that you have registered with the Selective Service System, or are exempt from having to do so under the Selective Service Law.

Background Suitability Investigation. Continued employment is contingent upon satisfactory completion of a background investigation and the granting of a federal suitability or security clearance. If selected, you may be offered tentative employment until the background investigation has been fully adjudicated.

Applicants who have held a General Schedule (GS) position within the last 52 weeks must meet the Time-in-Grade Requirement, which is 52 weeks of federal service at the next lower grade, GS-13.

As required by Executive Order 14043, federal employees are required to be fully vaccinated against COVID-19 regardless of the employee's duty location or work arrangement (e.g., telework, remote work, etc.), subject to such exceptions as required by law. If selected, you will be required to be vaccinated against COVID-19 and submit documentation of proof of vaccination before appointment or onboarding with the agency. The agency will provide additional information regarding what information or documentation will be needed and how you can request of the agency a legally required exception from this requirement.

Qualifications

To qualify for this position, applicants must meet the Basic Experience/Requirement and Specialized Experience as described below.

Basic Requirement:

In addition to the specialized experience, applicants must have IT-related experience demonstrating each of the four competencies for this job series: (1) Attention to Detail - Is thorough when performing work and conscientious about attending to detail. (2) Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services. (3) Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. (4) Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations.

Specialized Experience:
Applicants must have at least one year of full-time specialized work experience comparable in scope and responsibility to the next lower level (equivalent to the GS-13) in the federal government. Specialized experience is defined as experience in: (1) field of incident response and threat mitigation; (2) the operations and monitoring of a security operations center (SOC); and (3) serving as a member of a team that is responsible for providing cyber monitoring, detection and prevention.

Your qualifications will also be evaluated on the following competency (knowledge, skills, abilities and other characteristics):

Technical Expertise: Mastery of, and skill in applying IT security principles, concepts, methods, standards and practices to develop long-range plans for IT security that anticipate, identify, evaluate, mitigate and minimize risk associated with IT system vulnerabilities.

Preferred incumbent holds current certification from one or more of the following: Certified Information Systems Security Professional (CISSP); Global Information Assurance Certification (GIAC) such as Certified Forensic Analyst, Certified Incident Handler, Penetration Tester; and/or Certified Ethical Hacker (CEH).

*Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations. Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience.

Specialized experience must meet 52 weeks equivalent to the next lower grade level. A full year of work is considered to be 35-40 hours of work per week. Part-time experience will be credited on the basis of time actually spent in appropriate activities. Applicants wishing to receive credit for such experience must indicate clearly the nature of their duties and responsibilities in each position and the number of hours a week spent in such employment.

How you will be evaluated

You will be evaluated for this job based on how well you meet the qualifications above.

To preview the occupational questionnaire, click on the following link https://apply.usastaffing.gov/ViewQuestionnaire/11341716.

You will be evaluated for this job based on how well you meet the above qualifications.

Once the application process is complete, a review of the resume and supporting documentation will be made and compared against your responses to the assessment questionnaire to determine if you are qualified for this job. If, after reviewing your resume and/or supporting documentation, a determination is made that you have inflated your qualifications and/or experience, you may lose consideration for this position. Please follow all instructions carefully. Errors or omissions may affect your eligibility.

Veterans' Preference. If you are claiming veterans' preference you must submit supporting documentation as described in the "Required Documents" section. Visit the Feds Hire Vets website for more information regarding veterans' preference.

Interagency Career Transition Assistance Program (ICTAP). The ICTAP provides eligible displaced federal competitive service employees with selection priority over other candidates for competitive service vacancies. If your agency has notified you in writing that you are a displaced employee eligible for ICTAP consideration, you may receive selection priority if this vacancy is within your ICTAP eligibility, you apply under the instructions in this announcement, and you are found Well Qualified for this vacancy. Well Qualified means you must meet all the minimum qualification standards listed above and be assessed and assigned the rating of at least Well Qualified to receive special selection priority. Well Qualified is further defined as possessing the Basic Qualifications and meeting the specialized experience noted above.

You must provide proof of eligibility with your application to receive selection priority. Such proof may include a copy of your written notification of ICTAP eligibility or a copy of your separation personnel action form. Information about ICTAP eligibility is on OPM's Career Transition website.