Clarification from the agency

DoD Military Reserve (MR) and National Guard (NG) Technician Preference Eligibles and DoD Retained Grade Preference eligibles and All U.S. Citizens.

• You will execute foundational CSIRT operations, including cybersecurity event triage, incident ticketing, and initial host/network intrusion monitoring.
• You will learn to utilize specialized toolsets to identify malicious network activity and detect malware signatures.
• You will contribute to the preparation of detailed cybersecurity incident reports and ensure all basic problems and corrective actions are documented.
• You will participate in incident investigations alongside senior specialists, learning to draw evidence-based conclusions from network indicators.
• You will assist in correlating data to identify adversary movement and evaluate vulnerabilities via cyber intelligence fusion analysis.
• You will support the collection of digital evidence and assists in computer forensic investigations under the guidance of lead analysts.
• You will interact with senior specialists, contractors, and vendors to assist in diagnosing and correcting network vulnerability issues.

Conditions of employment

• Must be a US Citizen.
• Must be determined suitable for federal employment.
• Must participate in the direct deposit pay program.
• New employees to the Department of the Navy will be required to successfully pass the E-Verify employment verification check. To learn more about E-Verify, including your rights and responsibilities, visit e-verify.gov
• You must obtain and maintain a Top Secret security clearance and access to Sensitive Compartmented Information (SCI). Failure to do so may result in the withdrawal of an offer or removal. Indicate the level and date of your clearance in your resume.
• Successful completion of a pre-employment drug test (including marijuana) is required. A tentative offer of employment will be rescinded if you fail to report to the drug test appointment or pass the test. You will be subject to random testing.
• You must acknowledge in writing that you are accepting an appointment in the DCIPS (excepted service) which does not confer competitive status, prior to appointment.
• Within the Department of Defense (DoD), the appointment of retired military members within 180 days immediately following retirement date to a civilian position is subject to the provisions of 5 United States Code 3326.
• Males born after 12-31-59 must be registered for Selective Service.
• This position requires a periodic polygraph examination.
• This position may require a 2-year DCIPS trial period requirement.
• This position is eligible for ad-hoc/situational telework at the discretion of management.

Qualifications

GG-09:
I have one year of information technology related experience in the federal service or private or public sector demonstrating the following four competencies, as defined:

1. Attention to Detail - Is thorough when performing work and conscientious about attending to detail.

2. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services.

3. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately.

And 4. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations.

In addition to my experience demonstrating the four competencies above, your resume must demonstrate at least one year of specialized experience at or equivalent to the GG/GS-07 grade level or pay band in the Federal service or equivalent experience in the private or public sector. Specialized experience must demonstrate the following:

1. Collaborating with higher-grade specialists in carrying out assignments utilizing the development of new methods and procedures for a variety of CSIRT operations issues.

2. Contributing to the investigation of host intrusions ("hunt" activities), attempting to identify anomalous activity indicative of threat actor compromise.

3. Conducting a wide variety of computer forensic investigations by examining evidence from various forms of electronic media and equipment.

4. Participating in assessing and developing system security processes and procedures.

AND 5. Preparing detailed cybersecurity reports presenting information to management.

GS/GG-07:
I have one year of information technology related experience in the federal service or private or public sector demonstrating the following four competencies, as defined:

1. Attention to Detail - Is thorough when performing work and conscientious about attending to detail.

2. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services.

3. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately.

4. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations.

In addition to my experience demonstrating the four competencies above, I have one year of specialized experience equivalent to the next lower grade level (GG/GS-05) or pay band in the federal service or equivalent experience in the private or public sector:

1. Serving as an entry/developmental Cybersecurity Defense Analyst working under close supervision and receiving on-the-job and formal training to perform routine tasks involving duties related to Cybersecurity Incident Response Team (CSIRT) operations to include, but not limited to: cybersecurity event triage, incident ticketing, host and network intrusion monitoring, and malware detection.

2. Responding to cybersecurity events and utilizes tools to determine malicious activity on networks with instruction.

3. Participating in preparing detailed cybersecurity incident reports for management.

4. Participating in the investigation of cybersecurity-related incidents and collaborating with other higher-graded specialists leading the investigation to draw conclusions.

AND 5. Assisting in the correlation of data to identify adversary movement and assessment of threats and vulnerabilities via network intrusion.

Additional qualification information can be found from the following Office of Personnel Management website: https://www.opm.gov/policy-data-oversight/classification-qualifications/general-schedule-qualification-standards/#url=List-by-Occupational-Series

Additional qualification information can be found from the following DON DCIPS policy website:
https://www.secnav.navy.mil/doni/Naval%20Intelligence%20Activity/Chapter%205%20-%20Employment%20and%20Placement.pdf

How you will be evaluated

You will be evaluated for this job based on how well you meet the qualifications above.

In order to qualify for this position, your resume must provide sufficient experience and/or education, knowledge, skills, and abilities to perform the duties of the specific position for which you are being considered. Your resume is the key means we have for evaluating your skills, knowledge, and abilities as they relate to this position. Therefore, we encourage you to be clear and specific when describing your experience.

When the application process is complete, we will review your resume to ensure you meet the hiring eligibility and qualification requirements listed in this announcement. You will be rated based on the information provided in your resume and application package, along with your supporting documentation to determine your ability to demonstrate the following competencies:

• Written Communication
• Oral Communication
• Problem Solving
• Cybersecurity
• Information Technology Knowledge Management
• Information Technology Policy and Planning

This recruitment will utilize the following technical assessment tools: USA Hire and Structured Interview

Please follow all instructions carefully. Errors or omissions may affect your rating or consideration for employment.

All eligibility and qualification requirements must be met by the closing date of this announcement.

Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., professional, philanthropic, religious, spiritual, community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment.