IT SPECIALIST (INFOSEC) with Security Clearance

Duties * You will perform cyber threat hunting, incident response, and other blue team activities to detect, deter, disrupt, and deny adversary activities. * You will analyze security related events to provide a threat-based security assessment and initiate a cyber-incident response as necessary. * You will provide research, data analysis, sensor optimization, and custom signature development to maximize effectiveness and achieve mission success. * You will oversee the performance of contract support staff as a quality evaluator. Requirements Conditions of Employment * Must be a US Citizen. * Must be determined suitable for federal employment. * Must participate in the direct deposit pay program. * New employees to the Department of the Navy will be required to successfully pass the E-Verify employment verification check. To learn more about E-Verify, including your rights and responsibilities, visit e-verify.gov * Within the Department of Defense (DoD), the appointment of retired military members within 180 days immediately following retirement date to a civilian position is subject to the provisions of 5 United States Code 3326. * Males born after 12-31-59 must be registered for Selective Service. * You will be required to obtain and maintain an interim and/or final security clearance prior to entrance on duty. Failure to obtain and maintain the required level of clearance may result in the withdrawal of a job offer or removal. * Successful completion of a pre-employment drug test (including marijuana) is required. A tentative offer of employment will be rescinded if you fail to report to the drug test appointment or pass the test. You will be subject to random testing. * You will be required to complete training, obtain, and maintain a government credit card for travel and travel-related purchases. * This position may require travel from normal duty station to CONUS and OCONUS and may include remote or isolated sites. You must be able to travel on military and commercial aircraft for extended periods of time. * This is a Mission Essential position. You will be required to ensure organization or facility continuity of operations and/or completion of tasks that are considered essential to the mission designated by a local or command decision. * You will be required to obtain and maintain credentials for a Cyber IT/Cybersecurity Workforce position for specialty area 72 (Information System Security Management) at the intermediate level. Updates may occur to align with the DOD Manual 8140.03. Qualifications You must have one year of information technology related experience in the federal service or private or public sector demonstrating the following four competencies, as defined: 1. Attention to Detail - Is thorough when performing work and conscientious about attending to detail. 2. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services. 3. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. 4. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. In addition to the four competencies above your resume must demonstrate at least one year of specialized experience at or equivalent to the GS-12 grade level or pay band in the Federal service or equivalent experience in the private or public sector. Specialized experience must demonstrate the following: 1) Performing network security monitoring, threat hunting, Security Operations Center (SOC) activities, Security Information and Event Management (SIEM) solutions, forensics, or detecting threats within Information Technology (IT) or Operational Technology (OT) environments; 2) Applying advanced analytical techniques and methodologies and the ability to implement them by collecting and analyzing the data flow from sensors to determine potential and actual intrusions; 3) Evaluating the need for threat and vulnerability assessments, systems change proposals, etc.; 4) Applying advanced knowledge in the design of AIS security policies and specific systems security programs using a comprehensive, integrated, and systematic application of multiple automation security disciplines to develop an optimum automation security posture including hardware/firmware/software/facility security, and information security; and 5) Analyzing computer utilization and system performance by identifying intrusions, misuse, malfunctions, misconfigurations, and inefficiencies, in order to recommend changes to system design, software, operating procedures, and other protection mechanisms to ensure system integrity. NOTE: This information must be supported in your resume. Additional qualification information can be found from the following Office of Personnel Management website: https://www.opm.gov/policy-data-oversight/classification-qualifications/general-schedule-qualification-standards/2200/information-technology-it-management-series-2210-alternative-a/ Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., professional, philanthropic, religious, spiritual, community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. Additional information This position is covered by the Department of Defense Priority Placement Program. This announcement uses the Certain Personnel of the DoD direct hire authority to recruit and appoint qualified candidates to positions in the competitive service. This position has been designated as a Cyberspace Workforce position in the DoD Cyber Workforce Framework (DCWF) work role of Cyber Defense Analyst (code 511) and Cyber Defense Incident Responder (code 531) proficiency level Intermediate and, as a condition of employment, the incumbent of the position is required to obtain and maintain qualification in accordance with DoD M8140.03 Cyber Workforce Qualification and Management Program dated February 15, 2023 and supporting Department of Navy policies. 1. Obtain the foundational qualification within nine months and the residential qualification within 12 months of appointment and maintain those credentials as described in DoD M8140.03 for DCWF role of Cyber Defense Analyst (code 511) and Cyber Defense Incident Responder (code 531) proficiency level Intermediate. For more information, please review DoD M8140.03 and supporting DON policies. 2. Participate in continuous professional development program as described in DoD M8140.03. An annual 20 hour minimum of Cyber Workforce related continuous professional development must be documented and completed in a current individual development plan signed by both the employee and supervisor. Continuous professional development begins in the fiscal year after the employee has obtained both foundational and residential qualification requirements. The work is primarily sedentary. Some work may require walking and standing in conjunction with travelto and attendance at meetings and conferences away from the work site. Some employees maycarry light items, such as papers, books, or small parts, or drive a motor vehicle. The work doesnot require any special physical effort. Some employees may occasionally be exposed to uncomfortable conditions in such places as research and production facilities. Several vacancies may be filled. A tentative offer of employment will be rescinded if the selectee fails to meet the pre-employment requirements, including failure to report to any of the scheduled appointments. Federal annuitant information: The selection of an annuitant is subject to the Department of Defense and Department of the Navy policy on the employment of annuitants. Policy information may be found at: http://www.secnav.navy.mil/donhr/Documents/CivilianJobs/FedCivAnnuitants.pdf . Veteran's preference does not apply when selecting individuals under this specific hiring authority. However, if you claim veteran's preference, you will be required to submit supporting documentation with your application as described in the Required Documents section below. How You Will Be Evaluated You will be evaluated for this job based on how well you meet the qualifications above. In order to qualify for this position, your resume must provide sufficient experience and/or education, knowledge, skills, and abilities to perform the duties of the specific position for which you are being considered. Your resume is the key means we have for evaluating your skills, knowledge, and abilities as they relate to this position. Therefore, we encourage you to be clear and specific when describing your experience. As vacancies occur, the Human Resources Office will review your resume to ensure you meet the hiring eligibility and qualification requirements listed in this flyer. You will be rated based on the information provided in your resume, along with your supporting documentation. If selected, you may be required to provide additional supporting documentation. If after reviewing your resume and supporting documentation, a determination is made that you inflated your qualifications and/or experience, you may be found ineligible/n