Clarification from the agency

This public notice is to gather applications that may or may not result in a referral or selection

• Conducts risk and vulnerability assessments of installed information systems to identify vulnerabilities, risks, and protection needs.
• Participates in assessments of breaches of security to determine their impact on system operations and the confidentiality, integrity, and reliability of the information stored and manipulated within the system.
• Drafts updates to procedures such as the organization's contingency or disaster recovery plans to respond to new security requirements or changes in the IT architecture; and presents updated plans to the IT security manager for review and approval.
• Coordinates development work with higher echelon information security organizations, end-users within and outside the Bureau and Department, and with other IT Specialists within the Bureau IT organization.
• At the GS-11 level, the incumbent performs essentially the same duties as outlined above; however, the scope and complexity of assignments are of less responsibility and independence and receives closer than normal supervision.

Conditions of employment

• U.S. Citizenship is required.
• Incumbent will be subject to random drug testing.
• Must be able to obtain and maintain a Secret security clearance.
• Successfully pass the E-Verify employment verification check. To learn more about E-Verify, including your rights and responsibilities, visit: www.dhs.gov/E-Verify/

Qualifications

Applicants must meet all the qualification requirements described below by the closing date of this announcement.

Applicants applying for the GS-11 grade level must meet one of the following requirements:

A. Have a Ph.D. or equivalent doctoral degree from an accredited or pre-accredited institution in computer science, engineering, information science, information systems management, mathematics, operations research, statistics, or technology management;  

OR 

B. Have a Ph.D. or equivalent doctoral degree from an accredited or pre-accredited institution that provided a MINIMUM of 24 semester hours in one or more of the fields identified in Choice A above AND required the development or adaptation of applications, systems or networks; 

OR

C. Have 3 full years of progressively higher level graduate education leading to a Ph.D. or equivalent doctoral degree from an accredited or pre-accredited institution in computer science, engineering, information science, information systems management, mathematics, operations research, statistics, or technology management; 

OR

D. Have 3 full years of progressively higher level graduate education leading to a Ph.D. or equivalent doctoral degree from an accredited or pre-accredited institution that provided a MINIMUM of 24 semester hours in one or more of the fields identified in Choice A above AND required the development or adaptation of applications, systems or networks;

OR 

E. Have IT-related experience demonstrating EACH of the four competencies AND specialized experience listed below:

1. Attention to Detail - Conducts risk and vulnerability assessments of installed information systems to identify vulnerabilities, risks, and protection needs.
2. Customer Service -Delivers selected segments of an IT security awareness training program for end users at all levels in the organization.
3. Oral Communication - Provides updates on organization’s contingency or disaster recovery plans to respond to new security requirements or changes in the IT architecture.
4. Problem Solving - Participates in assessments of breaches of security to determine their impact on system operations

AND Have at least 1 full year of specialized experience equivalent to the GS-09 level in the Federal service which provided you with the particular knowledge, skills and abilities to perform the duties of the position.

Qualifying specialized experience must demonstrate the following:

1. Experience applying IT security principles and methods to assist in conducting risk and vulnerability assessments of installed information systems to identify vulnerabilities, risks, and protection needs.
2. Experience analyzing and evaluating program and/or policy information derived from a variety of sources to implement updates or new security requirements to IT architecture.

NOTE: In order to qualify for this position, your experience MUST be IT related; the experience may be demonstrated by paid or unpaid experience and/or completion of specific, intensive training (for example, IT certification), as appropriate.

Note: If you are qualifying based on education OR if there are mandatory education requirements listed under the Qualifications and Evaluations section, you MUST (1) submit a copy of your college transcript(s) with your application, and if selected, an official college transcript(s) will be required to verify education prior to employment; (2) transcripts MUST be legible AND include your name, major, school name/location, course title/number, date completed, grade, date degree conferred and number of credits earned; (3) if you attended more than one college you MUST submit a transcript from each institution if you wish your education to be considered in qualifying you for this position; (4) all college coursework that may be pertinent to qualifying you for the position MUST be included on the transcripts. If you fail to provide requested information, or the information you submit is insufficient to verify your eligibility, you WILL lose consideration for this position.

Applicants applying for the GS-12 grade level must meet the following requirements:

Have IT-related experience demonstrating EACH of the four competencies AND specialized experience listed below:

1. Attention to Detail - Conducts risk and vulnerability assessments and develops systems security contingency plans and disaster recovery procedures.
2. Customer Service - Coordinates the delivery of an IT security awareness training program for end users at all levels in the organization.
3. Oral Communication - Provides advice in network and systems design to ensure that appropriate systems security policies and procedures are introduced into designs at the outset.
4. Problem Solving - Participates in assessments of breaches of security to determine their impact on system operations.

AND Have at least 1 full year of specialized experience equivalent to the GS-11 level in the Federal service which provided you with the particular knowledge, skills and abilities to perform the duties of the position.

Qualifying specialized experience must demonstrate the following:

1. Experience applying IT security principles and methods to conduct risk and vulnerability assessments of installed information systems to identify vulnerabilities, risks, and protection needs.
2. Experience analyzing and evaluating program and/or policy information derived from a variety of sources to implement updates or new security requirements to IT architecture.
3. Experience participating in assessments of breaches of security to determine their impact on system operations and contributing findings for the development of corrective measures/and or awareness and training modules.

NOTE: In order to qualify for this position, your experience MUST be IT related; the experience may be demonstrated by paid or unpaid experience and/or completion of specific, intensive training (for example, IT certification), as appropriate. There is no substitute of education for specialized experience for the GS-12 position.

How you will be evaluated

You will be evaluated for this job based on how well you meet the qualifications above.

This position is being filled through the Governmentwide Direct Hire Authority for Information Technology Specialists (INFO SEC) positions.  Under the provisions of the Direct-Hire Authority, veterans’ preference and traditional rating and ranking of applications does not apply. For this announcement, all applicants will be forwarded to the selecting official for further consideration, and you may be subject to assessments during the selection process (e.g., technical writing sample or other work sample, structured interview, etc.). If you are selected, we will review your resume and required documents to determine if you meet the qualifications for this position, specifically the education, specialized experience, and knowledge, skills, and abilities (KSAs) necessary to perform the work of the position.

Your resume serves as the basis for qualification determinations and must highlight your most relevant and significant work experience and education (if applicable) as it relates to this job opportunity.

Your qualifications will be evaluated on the following KSAs and other characteristics that are relevant to the duties of this position and must be fully supported by information in your resume:

• Knowledge of information technology performance measures.
• Skill in evaluating and auditing IT programs, functions and systems.
• Skill in applying IT security principles and methods.
• Ability to apply program management principles, methods, and practices.
• Skill in identifying complex problems and reviewing related information technology

Agency and Interagency Career Transition Assistance Program (CTAP and ICTAP) candidates must be well qualified for the position to receive consideration for selection priority. Candidates are considered well qualified if their knowledge, skills, and abilities (KSAs) exceed the minimum qualifications described in the announcement.