Clarification from the agency

U.S. Citizens

• You will be an IT Cybersecurity Specialist (INFOSEC) in the Office of Compliance and Assessment (OCA), Office of the Commander-Headquarters at U.S. Fleet Cyber Command.
• You will serve as a Cybersecurity Assessor evaluating cybersecurity compliance using a systematic process to assess risks from multiple vectors, determine root causes and provide recommended mitigation strategies.
• You will be responsible for evaluating IT Systems and related functions to determine an organization's cybersecurity readiness in accordance with U.S. Government (USG), Department of Defense (DoD), Department of the Navy (DON) and command policies.
• You will develop and carry out assessment plans to ensure risk, compliance, and assurance efforts conform with security, resilience, and mission dependability requirements at the software application, system, and network environment level.
• You will audit, inspect and use assessment principles, plans, policies, standards, methods and procedures and tools to identify and evaluate technical and non-technical factors for the organization's cybersecurity status.
• You will incorporate all available information to assess an organization's cyber defense posture.
• You will compile lessons learned from inspections to contribute to cybersecurity vulnerability knowledge management and resultant training efforts.

Conditions of employment

• Must be a US Citizen.
• Must be determined suitable for federal employment.
• Must participate in the direct deposit pay program.
• New employees to the Department of the Navy will be required to successfully pass the E-Verify employment verification check. To learn more about E-Verify, including your rights and responsibilities, visit e-verify.gov
• Within the Department of Defense (DoD), the appointment of retired military members within 180 days immediately following retirement date to a civilian position is subject to the provisions of 5 United States Code 3326.
• Males born after 12-31-59 must be registered for Selective Service.
• Per the preliminary nationwide injunction on E.O. 14043, COVID-19 vaccinations will not be implemented or enforced. For more information on vaccine status and workplace safety protocol requirements see Additional Information below.
• You will be required to obtain and maintain an interim and/or final TOP SECRET/SCI security clearance prior to entrance on duty. Failure to obtain and maintain the required level of clearance may result in the withdrawal of a job offer or removal.
• This position is designated as a Cyber IT/Cybersecurity Workforce position. You must obtain and maintain the credentials as described in SECNAV M-5239.2 for specialty area 612 within 12 months of appointment.
• Successful completion of a pre-employment drug test (including marijuana) is required. A tentative offer of employment will be rescinded if you fail to report to the drug test appointment or fail the test. You will be subject to random testing.
• This position may require travel from normal duty station to CONUS and OCONUS and may include remote or isolated sites. You must be able to travel on military and commercial aircraft for extended periods of time.
• You will be required to obtain and maintain a U.S. Passport.

Qualifications

Applicants must have directly applicable experience that demonstrates the possession of knowledge, skills, abilities, and competencies necessary for immediate success in the position. Qualifying experience may have been acquired in any public or private sector job, but will clearly demonstrate past experience in the application of the particular competencies or knowledge, skills and abilities necessary to successfully perform the duties of the position. Such experience is typically in or directly relates to the work of the position to be filled. You must have IT-related experience demonstrating each of the four competencies listed below:

1- Attention to Detail- Is thorough when performing work and conscientious about attending to detail. IT-related experience demonstrating this competency include: Identifies common system and application security threats/vulnerabilities such as buffer overflow, mobile code, cross-site scripting, procedural language/structured query language (PL/SQL) and injections, covert channel, return-oriented attacks and malicious code.

2- Customer Service- Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services. IT-related experience demonstrating this competency include: Leverages internal and external program managers/SMEs to identify, create and integrate capabilities for network employment at are critical to detect, deny, disrupt, deceive and mitigate adversarial access to networks and key infrastructures.

3- Oral Communication- Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. IT-related experience demonstrating this competency include: Provides knowledge of system architectures and topology, administration, network access management, Internet Protocols (TCP/IP), various operating systems, ports and protocols, wireless technology and diagnostic tools.

4- Problem Solving: Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. IT-related experience demonstrating this competency include: Uses common networks, operating systems (OS), cross domain services and partnering technologies such as, routers, switches, firewalls, Assured Compliance Assessment Solution (ACAS) vulnerability scanning, End Point Security/ Host Based Security System (EPS/HBSS), Mobility (mobile device management (MDM), Releasable Networks, Cross Domain Solution (CDS), Wireless, Voice and Video over IP (VVOIP), and Windows and Unix/Linux Web/Domain Name Service (DNS), Database/Email Servers.

In addition to my experience demonstrating the four competencies above, I have qualifying experience such as:

-Experience applying DoD Security Technical Implementation Guides (STIG) and Security Requirements Guides (SRGs), DoD Instruction, DoDI 8551.01, and ability to perform vulnerability assessments in accordance with DoD Ports, Protocols, and Services Management (PPSM) guidelines.
-Experience evaluating cybersecurity compliance using systematic process to assess risks from multiple vectors, determine root causes, and provide recommended mitigation strategies.
-Experience executing risk-based auditing, compliance and vulnerability assessment methodologies to assess and evaluate system controls for information/mission assurance.
-Experience applying technical/behavioral methods to protect information systems, prevent vulnerabilities, provide mitigation strategies to minimize vulnerability impacts and store confidentiality, integrity, availability and authentication.

This position is within the Work Category PROFESSIONAL at Work Level II FULL PERFORMANCE, Series and Grade GG-2210-12.

Additional qualifications information can be found from the following Department of Defense website: https://dodcio.defense.gov/Cyber-Workforce/CES.aspx


Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., professional, philanthropic, religious, spiritual, community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment.

How you will be evaluated

You will be evaluated for this job based on how well you meet the qualifications above.

In order to qualify for this position, your resume must provide sufficient experience and/or education, knowledge, skills, and abilities to perform the duties of the specific position for which you are being considered. Your resume is the key means we have for evaluating your skills, knowledge, and abilities as they relate to this position. Therefore, we encourage you to be clear and specific when describing your experience.

As vacancies occur, the Human Resources Office will review your resume to ensure you meet the hiring eligibility and qualification requirements listed in this flyer. You will be rated based on the information provided in your resume, along with your supporting documentation.

If selected, you may be required to provide additional supporting documentation.

If after reviewing your resume and supporting documentation, a determination is made that you inflated your qualifications and/or experience, you may be found ineligible/not qualified.

Please follow all instructions carefully. Errors or omissions may affect your rating or consideration for employment.

All qualification requirements must be met before being considered for any vacancies.