Clarification from the agency

All U.S. Citizens

• Develops, implements and reviews strategic goals and objectives which includes OIG?s computer network defense, user access and activity monitoring, and endpoint security system cybersecurity capabilities.
• Develops new and evaluates existing cybersecurity systems and overall technologies? ability to meet customer needs or develops an alternative technical solution to meet needs. Verifies security, or scalability of system architecture.
• Responsible for understanding and managing the division?s resource or investment needs. Work with CISO and OCIO leadership to balance supply and demand, finding solutions or working through appropriate governance mechanisms.
• Develops, socializes, implements and validates new and current security policies across all technology projects, systems and services, including privacy, risk management, compliance and business continuity management.
• Cyber Defense Analysis: Uses data collected from a variety of cyber defense tools (e.g., IDS alerts, firewalls, network traffic logs) to analyze events that occur within their environments for the purpose of mitigating threats.
• Cyber Incident Response: Investigates, analyzes, and responds to cyber incidents within the network environment or enclave.
• Cyber Operations: Conducts collection, processing, and/or geolocation of systems to exploit, locate, and/or track targets of interest. Performs network navigation, tactical forensic analysis, and, when directed, executes on-net operations.
• Evaluates and articulates the impact of cybersecurity on (digital) business and communicates this to stakeholders at all levels be it corporate governance, other senior stakeholders, or OCIO system administrators.
• Evaluates new technology and makes recommendation for OIG systems, hardware/software. Ensures costs, documentation, specifications, timeliness, maximum resource utilization and compatibility and interoperability within the OIG IT environment.
• Prepares or provides input to IT procurement actions, requests for proposals, technical requirements; assesses proposals for technical responsiveness; coordinates with contracting officers and participates in proposal evaluation committees.
• Develops short and long range plans to support and meet OIG?S strategic plan, and OCIO?s goals and objectives including provisions for internal and external testing, vulnerability assessments, risk assessments, and penetration testing.
• Plan and schedule production work on a quarterly/annual basis and direct assignments. Adjust staffing levels and work procedures to accommodate resource allocation. Justify the purchase of new equipment and software applications.
• Improves work methods and procedures. Oversee the development of technical data, estimates, statistics, suggestions, and other valuable information to senior managers. Decides the methodologies to use to achieve work goals and objectives.
• Provides timely results and progress reports on projects and prepare and brief professional quality presentations for senior leaderships.

Conditions of employment

• Must be a U.S Citizen or National
• Males born after 12-31-59 must be registered or be exempt from Selective Service (see http://www.sss.gov).
• Position has been designated as TS/SCI Special Sensitive. Incumbent is required to obtain and maintain a TS/SCI security clearance
• This national security position, which may require access to classified information, requires a favorable suitability review and security clearance as a condition of employment. Failure to maintain security eligibility may result in termination.
• Incumbent is required to submit to urinalysis to screen for illegal drug use prior to appointment, and is subject to random drug testing for the duration of service with DoD OIG.
• The incumbent must adhere to the DoD Standards of Conduct.

Qualifications

GS-5 through GS-15 (or equivalent): For all positions individuals must have IT-related experience demonstrating each of the four competencies listed below.

1. Attention to Detail - Is thorough when performing work and conscientious about attending to detail.
2. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services.
3. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately.
4. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations.

and

Specialized Experience:
You must have at least one year (52 weeks) of specialized experience at the GS-13 level in the Federal service or at an equivalent level. Must have experience leading teams that perform duties in the field of Cybersecurity, Information Technology. Must have knowledge in all aspects of IT security technologies in security administration or engineering roles related to networks and security risk management. Experience must includes:

• Develops, maintains and applies IT security principles, concepts, methods, standards and practices to develop and interpret policies and strategies governing the operation of information systems and networks with Federal and DoD.
• Recommends best practices, plans and policies to improve cybersecurity incident response and coordination.
• Designs, implements, documents, and ensures proper management of critical the network management systems to include firewalls, honeypots, honeydocs, security information and event management (SIEM) systems, virtual private networks (VPNs), intrusion detection/prevention systems (IDS/IPS), e-mail gateways, web security gateways, domain name services (DNS) sinkhole servers, router access control lists (ACLs), and malicious software (malware) sandboxes.
• Supports the CISO in implementing and running the enterprise information security program. This involves advising and supporting the CISO on identifying, evaluating, and reporting on legal and regulatory, IT, and cybersecurity risk to information assets, while supporting and advancing OIG objectives.
• Providies expert advice concerning improving cyber security and IT risk management.
• Manages personnel to include recruitment, hiring, performance, and awards.
• Must be an effective communicator, both verbal and written, and able to prepare and brief professional quality presentations.

Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual, community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates to paid employment. You will receive credit for all qualifying experience.

Only experience and/or education obtained by the closing date of this announcement will be considered.

How you will be evaluated

You will be evaluated for this job based on how well you meet the qualifications above.

Once the application process is complete, a review of your resume and supporting documentation will be made and compared against your responses to the assessment questionnaire to determine if you are qualified for this job.

The numeric rating you receive is based on your responses to the questionnaire. The score is a measure of the degree to which your background matches the competencies required for this position. If, after reviewing your resume and or supporting documentation, a determination is made that you have inflated your qualifications and or experience, you may lose consideration for this position.

Please follow all instructions carefully. Errors or omissions may affect your rating.

All qualified candidates will be evaluated on the following competencies:

• Enterprise Architecture
• Governance
• IT Operations Support
• Project Management & IT Solution Development
• Security and Risk Management
• Strategic Planning
• Supervisor
• Technical Communication

You can preview the Assessment Questionnaire here:https://apply.usastaffing.gov/ViewQuestionnaire/12112317