Clarification from the agency

Please see the "Who May Apply" section under the Qualifications section.

In order to qualify for this position, resumes must document sufficient experience and/or education, knowledge, skills, and ability to perform the duties of the position. Applicant resumes are a key means for evaluating skills, knowledge, and abilities as they relate to this position. Therefore, applicants are encouraged to be clear and specific when describing experience.

• Develops policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data.
• Provides timely detection, identification, and alerting of possible attacks/intrusions, anomalous activities, and misuse activities; and distinguishes these incidents and events from benign activities.
• Receives and analyzes network alerts from various sources within the enterprise and determines possible causes of such alerts.
• Performs event correlation using information gathered from a variety of sources within the enterprise to gain situational awareness and determine the effectiveness of an observed attack.
• Analyzes identified malicious activity to determine weaknesses exploited, exploitation methods, and effects on system and information.
• Documents and escalates incidents that may cause ongoing and immediate impact to the environment.
• Monitors information security data sources to maintain organizational situational awareness.
• Works with stakeholders to resolve computer security incidents.
• Provides summary reports of network events and activity relevant to cyber defense practices.
• Ensures the rigorous application of information security/information assurance policies, principles, and practices in the delivery of all IT services.

Conditions of employment

• Must pass all applicable records and background check.
• Must successfully pass the E-Verify employment verification check. Any discrepancies must be resolved as a condition of employment.

Qualifications

Resumes must include information which demonstrates experience and knowledge, skills, and ability (KSAs) as they relate to this position. Applicants are encouraged to be clear and specific when describing their experience level and KSAs.

A qualified candidate possess the following:

• Knowledge of cybersecurity and privacy principles used to manage risks related to the use, processing, storage, and transmission of information or data sufficient to provide advice and guidance in implementing IT security policies and procedures in the development and operation of network systems.
• Knowledge of cyber defense tools for continuous monitoring and analysis of system activity to identify malicious activity sufficient to react accordingly by instructing or informing other IT specialists to minimize the extent of the activity and any damage that may be caused.
• Knowledge of security event correlation processes.
• Knowledge of intrusion detection methodologies and techniques for detecting host and network-based intrusions.
• Knowledge of network traffic analysis methods.
• Knowledge of incident response and handling processes.
• Knowledge of industry-standard and organizationally accepted analysis principles and methods.
• Skill in conducting continuous monitoring activities designed to detect and respond to security incidents.
• Skill in analyzing/evaluating data and preparing reports.
• Ability to communicate effectively both orally and in writing

How you will be evaluated

You will be evaluated for this job based on how well you meet the qualifications above.

All resumes will be reviewed to determine if they meet the hiring eligibility and qualification requirements listed in this announcement, and will be rated based on the information provided in the resume to determine the level of knowledge, skills and abilities (KSAs) related to the job requirements. Using the qualifications of the position, a predetermined rating criterion of KSAs will be used for each resume. Best qualified applicants will be referred to the hiring manager. The selecting official may choose to conduct interviews.