This position is located in the Cyber Defense Operations Division in the Cybersecurity and Privacy Operations Center (CPOC) of the USDA's Office of the Chief Information Officer (OCIO).
Summary
This position is located in the Cyber Defense Operations Division in the Cybersecurity and Privacy Operations Center (CPOC) of the USDA's Office of the Chief Information Officer (OCIO).
Applications will be accepted from any U.S. citizen. Direct Hire Authority will be used to fill this position. Veterans Preference and traditional rating and ranking of applicants does not apply to this vacancy.
Correlate incident data to identify specific vulnerabilities and make recommendations that enable expeditious remediation.
Perform analysis of log files from a variety of sources (e.g., individual host logs, network traffic logs, firewall logs, and intrusion detection system [IDS] logs) to identify possible threats to network security.
Perform real-time cyber defense incident handling (e.g., forensic collections, intrusion correlation and tracking, threat analysis, and direct system remediation) tasks to support deployable Incident Response Teams (IRTs).
Perform tier 1, 2, and 3 malware analysis.
Capture and analyze network traffic associated with malicious activities using network monitoring tools.
Examine recovered data for information of relevance to the issue at hand.
Collect and analyze intrusion artifacts (e.g., source code, malware, and system configuration) and use discovered data to enable mitigation of potential cyber defense incidents within the enterprise.
Document and escalate incidents (including event's history, status, and potential impact for further action) that may cause ongoing and immediate impact to the environment.
Investigates, analyzes, and responds to cyber incidents within the network environment or enclave.
Males born after 12/31/1959 must be Selective Service registered or exempt
Subject to satisfactory adjudication of background investigation and/or fingerprint check
Successful completion of one-year probationary period, unless previously served.
Direct Deposit: Per Public Law 104-134 all Federal employees are required to have federal payments made by direct deposit to their financial institution
Successfully pass the E-Verify employment verification check. To learn more about E-Verify, including your rights and responsibilities, visit E-Verify at https://www.e-verify.gov/
Qualifications
Applicants must meet all qualifications and eligibility requirements by the closing date of the announcement including specialized experience and/or education, as defined below.
IT Competencies:
Individuals must have IT-related experience demonstrating each of the four competencies listed below.
1. Attention to Detail-Is thorough when performing work and conscientious about attending to detail.
2. Customer Service-Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services.
3. Oral Communication-Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately.
4. Problem Solving-Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations.
Specialized Experience:
Qualifying experience for GS-12 includes one year of specialized experience comparable to GS-11 which is directly related to the work of this position and which has equipped the applicant with the knowledge, skills, and abilities to perform successfully the duties of the position. For this position, specialized experience is demonstrated experience performing real-time cyber defense incident handling (e.g., forensic collections, intrusion correlation and tracking, threat analysis, and direct system remediation) tasks to document cyber defense incidents from initial detection through final resolution.
(Note: This experience must be demonstrated on your resume/supporting documents).
Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community, student, social). Volunteer work helps build critical competencies and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience.
Education
There are no educational requirements for this position.
Additional information
- Duty location: If selected, candidates who live in the Washington, DC local commuting area will be expected to report to the Washington, DC office and may be offered telework.
- The salary ranges vary according to the geographic area locality adjustments; therefore, rates advertised represent base pay only as pay will depend upon the selectee's duty location. Please see the 2024 General Schedule (GS) Locality Pay Tables for more information.
- DIRECT HIRE AUTHORITY: This announcement is issued under the direct-hire authority to recruit for positions for which there is a critical need. Selectee(s) will receive a career or career-conditional appointment in the competitive service and may be required to serve a one-year probationary period. Category rating, veteran's preference and traditional rating and raking of applicants do not apply to this public notice.
- CAREER TRANSITION: Career Transition Assistance Plan (CTAP), Reemployment Priority List (RPL) or Interagency Career Transition Assistance Plan (ICTAP): For information on how to apply as a CTAP, RPL or ICTAP eligibility see http://www.opm.gov/policy-data-oversight/workforce-restructuring/employee-guide-to-career-transition/. To exercise selection priority for this vacancy, CTAP/RPL/ICTAP candidates must meet the basic eligibility requirements and all selective factors. CTAP/ICTAP candidates must be rated and determined to be well qualified (or above) based on an evaluation of the competencies listed in the How You Will Be Evaluated section. When assessed through a score-based category rating method, CTAP/ICTAP applicants must receive a rating of at least 85 out of a possible 100.
- DRUG TESTING: This is a Testing Designated Position (TDP). Selectee must submit to a urinalysis to screen for illegal drug use prior to appointment and random testing thereafter. Final appointment and continued employment is conditional on negative results for illegal drug use.
- CONFIDENTIAL FINANCIAL DISCLOSURE REPORT: If selected, you will be required to submit Form OGE-450 within 30 days of your initial appointment date, and annually thereafter. Selectee is subject to financial Disclosure Requirements in accordance with 5 CFR, Part 2635, Sub part E regarding business or personal transactions with applicants, borrowers, or business contacts who have or who are seeking business with this Agency. Selectee must be able to obtain and maintain a security clearance. If selected you will be subject to a National Agency Check and Inquiry (NACI) and a credit report.
A career with the U.S. government provides employees with a comprehensive benefits package. As a federal employee, you and your family will have access to a range of benefits that are designed to make your federal career very rewarding. Opens in a new windowLearn more about federal benefits.
Eligibility for benefits depends on the type of position you hold and whether your position is full-time, part-time or intermittent. Contact the hiring agency for more information on the specific benefits offered.
How you will be evaluated
You will be evaluated for this job based on how well you meet the qualifications above.
Your resume and supporting documentation will be reviewed to determine if you meet the minimum qualifications, to include any selective placement factor(s), if applicable, for the position.
Under the provisions of the Direct Hire Authority (DHA), veteran's preference does not apply. While veterans' preference does not apply to the DHA, veterans are encouraged to submit their documentation. Applicants who meet the minimum qualification requirements, to include any selective placement factor(s), if applicable and who are otherwise eligible to apply for the position, will be referred for selection consideration. For more information on OPM's authorization for DHA, please visit https://www.opm.gov/policy-data-oversight/hiring-information/direct-hire-authority/
Applicants who are displaced Federal employees within the local commuting who are requesting priority consideration under the Interagency Career Transition Assistance Program (ICTAP) or Career Transition Assistance Program (CTAP) must be determined Well Qualified using the below evaluation criteria.
Well Qualified-Meets the minimum qualifications of the position and is proficient in some, but not all, of the relevant competencies. Qualified-Meets the minimum qualifications of the position but is not proficient in the relative competencies to a substantive degree.
Incident Management
Threat Analysis
Vulnerabilities Assessment
Any selections made under this notice will be processed as new appointments to the civil service. Current Federal employees would therefore, be given new appointments to the civil service.
Clicking the link below will present a preview of the application form; i.e. the online questionnaire. The application form link below will only provide a preview and does not initiate the application process. To initiate the online application process, click the "Apply" button to the right.
A career with the U.S. government provides employees with a comprehensive benefits package. As a federal employee, you and your family will have access to a range of benefits that are designed to make your federal career very rewarding. Opens in a new windowLearn more about federal benefits.
Eligibility for benefits depends on the type of position you hold and whether your position is full-time, part-time or intermittent. Contact the hiring agency for more information on the specific benefits offered.
The following documents are required for your applicant package to be complete. Our office cannot be responsible for incompatible software, your system failure, etc. Encrypted documents will not be accepted. Failure to submit required, legible documents may result in loss of consideration.
Resume that includes:1) personal information such as name, address, contact information; 2) education; 3) detailed work experience related to this position as described in the major duties including work schedule, hours worked per week, dates of employment; title, series, grade (if applicable); 4) other qualifications.
If claiming veteran's preference, you must submit a DD214, Certificate of Release from Active Duty, which shows dates of service and discharge under honorable conditions.If currently on active duty you must submit a certification of expected discharge or release from active duty service under honorable conditions not later than 120 days after the date the certification is submitted.Veteran's preference must be verified prior to appointment.Without this documentation, you will not receive veteran's preference and your application will be evaluated based on the material(s) submitted.
If claiming 10-point veteran's preference you must provide the DD214 or certification requirements (see above bullet), plus the proof of entitlement of this preference as listed on the SF-15 Application for 10-point Veterans' Preference. The SF-15 should be included but is not required. Failure to submit these documents could result in the determination that there is insufficient documentation to support your claim for 10-point preference. For more information on veterans' preference visit FEDSHIREVETS
Surplus or displaced employees eligible for CTAP, RPL, or ICTAP priority must provide: proof of eligibility (RIF separation notice, notice of proposed removal for declining a transfer of function or directed reassignment to another commuting area, notice of disability annuity termination), SF-50 documenting separation (as applicable), and your most recent SF-50 noting position, grade level, and duty location with your application per 5 CFR 330.
* Although Veteran's Preference does not apply to the Direct Hire Authority, upon selection Veteran's documentation may be required.
Please read the entire announcement and all instructions before you begin. You must complete this application process and submit all required documents electronically by 11:59p.m. Eastern Time (ET) on the closing date of this announcement.
Applying online is highly encouraged. We are available to assist you during business hours (normally 8:00a.m. - 4:00p.m., Monday - Friday). If applying online poses a hardship, contact the Agency Contact listed below well before the closing date for an alternate method. All hardship application packages must be complete and submitted no later than noon ET on the closing date of the announcement in order to be entered into the system prior to its closing.
This agency provides reasonable accommodation to applicants with disabilities on a case-by-case basis; contact the Agency Contact to request this.
To begin, click "Apply" and follow the instructions to complete the Assessment Questionnaire and attach your resume and all required documents.
NOTE: If a document is resubmitted, it replaces the previous submission, which means the previous document is no longer available to the Human Resources Office. If you are adding to, rather than replacing a previous submission, you must upload both the old document and the new document. You must verify that uploaded documents from USAJOBS transfer into the Agency's staffing system as there is a limitation to the number of documents that can be transferred. However, once in the Agency's staffing system, you will have the opportunity to upload additional documents. Applicants may combine all like required documents (e.g. SF-50s or veteran docs) into one or more files and scan for uploading into the application. Each file must not exceed 3MB. Grouping like documents into files will simplify the application process. Documents must be in one of the following formats: GIF, JPEG, JPG, PDF, PNG, RTF, or Word (DOC or DOCX). Uploaded documents may not require a password, digital signature, or other encryption to open.
Office of the Chief Information Officer
1400 Independence Ave SW
Washington, DC 20250
US
Next steps
Your application will be reviewed to verify that you meet the eligibility and qualification requirements for the position prior to issuing referral lists to the selecting official. If further evaluation or interviews are required, you will be contacted. Log in to your USAJOBS to check your application status.
You must choose to turn on email notifications in your USAJOBS profile if you want to receive important email notifications that may impact your applicant experience (e.g. If you start an application and do not submit it prior to the closing date, USAJOBS will send an email reminder that the closing date is approaching and your application is in an incomplete status).
Multiple positions may be filled from this announcement
The Federal hiring process is set up to be fair and transparent. Please read the following guidance.
The following documents are required for your applicant package to be complete. Our office cannot be responsible for incompatible software, your system failure, etc. Encrypted documents will not be accepted. Failure to submit required, legible documents may result in loss of consideration.
Resume that includes:1) personal information such as name, address, contact information; 2) education; 3) detailed work experience related to this position as described in the major duties including work schedule, hours worked per week, dates of employment; title, series, grade (if applicable); 4) other qualifications.
If claiming veteran's preference, you must submit a DD214, Certificate of Release from Active Duty, which shows dates of service and discharge under honorable conditions.If currently on active duty you must submit a certification of expected discharge or release from active duty service under honorable conditions not later than 120 days after the date the certification is submitted.Veteran's preference must be verified prior to appointment.Without this documentation, you will not receive veteran's preference and your application will be evaluated based on the material(s) submitted.
If claiming 10-point veteran's preference you must provide the DD214 or certification requirements (see above bullet), plus the proof of entitlement of this preference as listed on the SF-15 Application for 10-point Veterans' Preference. The SF-15 should be included but is not required. Failure to submit these documents could result in the determination that there is insufficient documentation to support your claim for 10-point preference. For more information on veterans' preference visit FEDSHIREVETS
Surplus or displaced employees eligible for CTAP, RPL, or ICTAP priority must provide: proof of eligibility (RIF separation notice, notice of proposed removal for declining a transfer of function or directed reassignment to another commuting area, notice of disability annuity termination), SF-50 documenting separation (as applicable), and your most recent SF-50 noting position, grade level, and duty location with your application per 5 CFR 330.
* Although Veteran's Preference does not apply to the Direct Hire Authority, upon selection Veteran's documentation may be required.
Please read the entire announcement and all instructions before you begin. You must complete this application process and submit all required documents electronically by 11:59p.m. Eastern Time (ET) on the closing date of this announcement.
Applying online is highly encouraged. We are available to assist you during business hours (normally 8:00a.m. - 4:00p.m., Monday - Friday). If applying online poses a hardship, contact the Agency Contact listed below well before the closing date for an alternate method. All hardship application packages must be complete and submitted no later than noon ET on the closing date of the announcement in order to be entered into the system prior to its closing.
This agency provides reasonable accommodation to applicants with disabilities on a case-by-case basis; contact the Agency Contact to request this.
To begin, click "Apply" and follow the instructions to complete the Assessment Questionnaire and attach your resume and all required documents.
NOTE: If a document is resubmitted, it replaces the previous submission, which means the previous document is no longer available to the Human Resources Office. If you are adding to, rather than replacing a previous submission, you must upload both the old document and the new document. You must verify that uploaded documents from USAJOBS transfer into the Agency's staffing system as there is a limitation to the number of documents that can be transferred. However, once in the Agency's staffing system, you will have the opportunity to upload additional documents. Applicants may combine all like required documents (e.g. SF-50s or veteran docs) into one or more files and scan for uploading into the application. Each file must not exceed 3MB. Grouping like documents into files will simplify the application process. Documents must be in one of the following formats: GIF, JPEG, JPG, PDF, PNG, RTF, or Word (DOC or DOCX). Uploaded documents may not require a password, digital signature, or other encryption to open.
Office of the Chief Information Officer
1400 Independence Ave SW
Washington, DC 20250
US
Next steps
Your application will be reviewed to verify that you meet the eligibility and qualification requirements for the position prior to issuing referral lists to the selecting official. If further evaluation or interviews are required, you will be contacted. Log in to your USAJOBS to check your application status.
You must choose to turn on email notifications in your USAJOBS profile if you want to receive important email notifications that may impact your applicant experience (e.g. If you start an application and do not submit it prior to the closing date, USAJOBS will send an email reminder that the closing date is approaching and your application is in an incomplete status).
Multiple positions may be filled from this announcement
Fair and transparent
The Federal hiring process is set up to be fair and transparent. Please read the following guidance.
