- Perform comprehensive cybersecurity analysis and security reviews for the administration of the Air Force Materiel Command's (AFMC) Intelligence Community (IC) Cybersecurity Program.
- Perform risk and vulnerability assessments across diverse technological areas including CDSs, networks, infrastructure, applications, and operational environments.
- Manage the development, review, and tracking of documented POA&M remediation plans for systems with identified security vulnerabilities or non-compliant with AF IC, ODNI, and other policies.
- Advise senior leadership on risk levels and changes affecting the organization's cybersecurity posture.

Conditions of employment

• U.S. Citizenship Required
• All new DCIPS employees are required to complete a two-year DCIPS trial period.
• If authorized, PCS will be paid IAW JTR and AF Regulations. If receiving an authorized PCS, you may be subject to completing/signing a CONUS agreement. More information on PCS requirements, may be found at: https://afciviliancareers.com/regulatory/
• This posn is subject to provisions of the DoD Priority Placement Program
• Must be registered for Selective Service, see Legal and Regulatory Guide
• The employee may be required to work other than normal duty hours, which may include evenings, weekends, and/or holidays.
• An advanced cybersecurity-related or professional degree is desirable.
• Employee must maintain current certifications
• Disclosure of Political Appointments
• Direct Deposit: All federal employees are required to have direct deposit
• Advance in hire may be authorized if there is demonstrable proof provided on your resume. Leave accrual may be authorized upon request.
• Relocation costs or other incentives may be available and considered by the organization.
• This is a Centrally Managed position under the Cyber and Information Technology Career Field.
• This position is a Defense Civilian Intelligence Personnel Systems (DCIPS) position implemented under Section 504, Title V of Public Law 99-569, Intelligence Authorization Act for Fiscal Year 1987, as codified in Sec 1601, Chap 83 of Title 10 United
• DoD Components with DCIPS positions apply Veterans' Preference to preference eligible candidates as defined by Section 2108 of Title 5 USC, in accordance with the procedures provided in DoD Instruction 1400.25, Volume 2005
• If you are a veteran claiming veterans' preference, as defined by section 2108 of Title 5 U.S.C., you must submit documents verifying your eligibility with your application package. For additional information on DCIPS, http://dcips.defense.gov/
• Incumbent may be subject to psychological screening/ polygraph testing as an inherent primary requirement of their position.
• Upon completion of your probationary/trial period, your employment will be terminated unless you receive certification, in writing, that your continued employment advances the public interest.

Qualifications

In order to qualify, you must meet the quality experience requirements described in the Office of Personnel Management (OPM) Qualification Standards, Information Technology (IT) Management Series 2210 (Alternative A).

BASIC REQUIREMENT OR INDIVIDUAL OCCUPATIONAL REQUIREMENT: For all positions individuals must have IT-related experience demonstrating each of the four competencies listed below.

1. Attention to Detail - Is thorough when performing work and conscientious about attending to detail.
2. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services.
3. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately.
4. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations.

In addition to meeting the basic requirement above, to qualify for this position you must also meet the qualification requirements listed below:

EXPERIENCE REQUIRED: Your resume must reflect the quality level of experience which demonstrates the possession of the knowledge, skills, abilities, and competencies necessary for successful job performance required for this position. Examples of creditable experience include: knowledge of a wide range of cybersecurity concepts, principles, and practices. Knowledge of Cross Domain Solutions technologies, IT server and client technologies, network security architecture, threat assessment methodologies, common system vulnerabilities and the ability to analyze and resolve cybersecurity problems.

KNOWLEDGE, SKILLS AND ABILITIES (KSAs): Your qualifications will be evaluated on the basis of your level of knowledge, skills, abilities and/or competencies in the following areas:
1. Extensive knowledge of risk management processes and requirements in alignment with Risk Management Framework (RMF), and organizational risk management directly related to the display, discussion, processing, storage, and connectivity of classified data.
2. Advanced knowledge of network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth, Zero Trust, Cross Domain Solutions, data-centric security) relative to information technology (IT) goals and objectives.
3. Advanced knowledge of cybersecurity principles and organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation) and ability to assess risk in application of these principles and requirements to protect systems and applications against security threats and vulnerabilities.
4. Proficient knowledge of incident response and handling methodologies.
5. Skill in reviewing operational requirements and application of network/device/software protection methods (e.g., security controls, control systems, intrusion detection/protection systems, network data flow controls, identity and access management schemas, etc.)

PART-TIME OR UNPAID EXPERIENCE: Credit will be given for appropriate unpaid and or part-time work. You must clearly identify the duties and responsibilities in each position held and the total number of hours per week.

VOLUNTEER WORK EXPERIENCE: Refers to paid and unpaid experience, including volunteer work done through National Service Programs (i.e., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community; student and social). Volunteer work helps build critical competencies, knowledge and skills that can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience.

How you will be evaluated

You will be evaluated for this job based on how well you meet the qualifications above.

Your application package (resume, supporting documents, and responses to the questionnaire) will be used to determine your eligibility, qualifications, and quality ranking for this position. Please follow all instructions carefully. Errors or omissions may affect your rating or consideration for employment.

BASIS OF RATING: Your application will be rated under the Cut Point procedures based on the extent to which the quality, depth, and complexity of your experience and education relate to the qualification requirements. Additional points are not added for Veteran's Preference; however, Veteran's Preference is considered where applicable.

Best Qualified Group: Candidates in this category possess exceptional skills and experience to exceed well above the minimum requirements.
Fully Qualified Group: Candidates in this category possess good skills and experience above the minimum requirements.
Basically Qualified Group: Candidates in this category meet the minimum education and/or experience requirements.

Your responses to the questionnaire may be compared to the documents you submit. The documents you submit must support your responses to the online questionnaire. If your application contradicts or does not support your questionnaire responses, you will receive a rating of "not qualified" or "insufficient information" and you will not receive further consideration for this job.

Applicants who disqualify themselves will not be evaluated further.