Summary You will serve as an entry/development Information Technology (IT) Specialist as a Cybersecurity Defense Analyst for the Cybersecurity Incident Response Team (CSIRT) of HOPPER GLOBAL COMMUNICATIONS CENTER. Responsibilities You will execute foundational CSIRT operations, including cybersecurity event triage, incident ticketing, and initial host/network intrusion monitoring. You will learn to utilize specialized toolsets to identify malicious network activity and detect malware signatures. You will contribute to the preparation of detailed cybersecurity incident reports and ensure all basic problems and corrective actions are documented. You will participate in incident investigations alongside senior specialists, learning to draw evidence-based conclusions from network indicators. You will assist in correlating data to identify adversary movement and evaluate vulnerabilities via cyber intelligence fusion analysis. You will support the collection of digital evidence and assists in computer forensic investigations under the guidance of lead analysts. You will interact with senior specialists, contractors, and vendors to assist in diagnosing and correcting network vulnerability issues. Requirements Conditions of Employment Qualifications GG-09: I have one year of information technology related experience in the federal service or private or public sector demonstrating the following four competencies, as defined: 1. Attention to Detail - Is thorough when performing work and conscientious about attending to detail. 2. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services. 3. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. And 4. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. In addition to my experience demonstrating the four competencies above, your resume must demonstrate at least one year of specialized experience at or equivalent to the GG/GS-07 grade level or pay band in the Federal service or equivalent experience in the private or public sector. Specialized experience must demonstrate the following: 1. Collaborating with higher-grade specialists in carrying out assignments utilizing the development of new methods and procedures for a variety of CSIRT operations issues. 2. Contributing to the investigation of host intrusions ("hunt" activities), attempting to identify anomalous activity indicative of threat actor compromise. 3. Conducting a wide variety of computer forensic investigations by examining evidence from various forms of electronic media and equipment. 4. Participating in assessing and developing system security processes and procedures. AND 5. Preparing detailed cybersecurity reports presenting information to management. GS/GG-07: I have one year of information technology related experience in the federal service or private or public sector demonstrating the following four competencies, as defined: 1. Attention to Detail - Is thorough when performing work and conscientious about attending to detail. 2. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services. 3. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. 4. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. In addition to my experience demonstrating the four competencies above, I have one year of specialized experience equivalent to the next lower grade level (GG/GS-05) or pay band in the federal service or equivalent experience in the private or public sector: 1. Serving as an entry/developmental Cybersecurity Defense Analyst working under close supervision and receiving on-the-job and formal training to perform routine tasks involving duties related to Cybersecurity Incident Response Team (CSIRT) operations to include, but not limited to: cybersecurity event triage, incident ticketing, host and network intrusion monitoring, and malware detection. 2. Responding to cybersecurity events and utilizes tools to determine malicious activity on networks with instruction. 3. Participating in preparing detailed cybersecurity incident reports for management. 4. Participating in the investigation of cybersecurity-related incidents and collaborating with other higher-graded specialists leading the investigation to draw conclusions. AND 5. Assisting in the correlation of data to identify adversary movement and assessment of threats and vulnerabilities via network intrusion. Additional qualification information can be found from the following Office of Personnel Management website: https://www.opm.gov/policy-data-oversight/classification-qualifications/general-schedule-qualification-standards/#url=List-by-Occupational-Series Additional qualification information can be found from the following DON DCIPS policy website: https://www.secnav.navy.mil/doni/Naval%20Intelligence%20Activity/Chapter%205%20-%20Employment%20and%20Placement.pdf Education In lieu of specialized experience, you may qualify with the following education or combination of both education and experience: GG-7: 4-year course of study leading to a bachelor's degree GG-9: Master's or equivalent graduate degree or 2 full years of progressively higher level graduate education leading to such a degree or LL.B. or J.D., if related Education Substitution If you are using education to meet all or part of the qualification requirements, you must submit a copy of your transcripts or an itemized list of college courses which includes equivalent information from the transcript (course title, semester/quarter hours, and grade/degree earned) in your resume. See OPM's General Policies for information on crediting education. Foreign Education: Required for vacancies with Positive Education or Education Substitution Education completed in foreign colleges or universities may be used to meet the qualification requirements if the applicant can provide documentation indicating that the foreign education is comparable to that received in an accredited educational institution in the United States. It is the responsibility of the applicant to provide such evidence when applying for further information, visit: http://www.ed.gov/about/offices/list/ous/international/usnei/us/edlite-visitus-forrecog.html Recent Grad Recent graduates who completed a qualifying associate, bachelors, masters, professional, doctorate, vocational or technical degree or certificate within the last two years of the closing date of the announcement. Also, veterans who were unable to apply within two years of receiving my degree, due to military service obligations but are still within six years of graduation completion date with a qualifying degree. A transcript must be submitted with your application if qualifying using education. See Required Documents for additional information. Additional Information This position is covered by the Department of Defense Priority Placement Program. Additional vacancies may be filled by this announcement. A tentative offer of employment will be rescinded if the selectee fails to meet the pre-employment requirements, including failure to report to any of the scheduled appointments. Federal annuitant information: The selection of an annuitant is subject to the Department of Defense and Department of the Navy policy on the employment of annuitants. Policy information may be found at: http://www.secnav.navy.mil/donhr/Documents/CivilianJobs/FedCivAnnuitants.pdf During the application process you will have the ability to opt-in to make your resume available to hiring managers in the agency who have similar positions in the local commuting area. Depending on the hiring organization and the position being filled, job requirements (e.g., security clearance, travel, drug testing, financial disclosure filing, bargaining unit status, etc.) may vary. Other hiring managers filling similar positions may offer relocation expense reimbursement and/or may offer recruitment incentives for new employees, depending on funding availability and in accordance with policy. If you opt-in and are referred on a certificate, your resume will be available to other hiring managers for 180-days from the date the job announcement closes. Opting in does not impact your application for this announcement, nor does it guarantee further consideration for additional positions. ICTAP does not apply to Excepted Service positions. PPP applicants will be placed at the FPL, if determined Well Qualified (WQ). To receive priority consideration, the FPL must be the same grade level or equivalent of the retained grade or the grade held immediately prior to separation. All Defense Intelligence positions under the Defense Civilian Intelligence Personnel System (DCIPS) are in the excepted service by specific statue, 10 U.S.C. 1601. This position is in the excepted service and does not confer competitive status. For more information on the DCIPS occupational structure click here. For more information about career advancement in DCIPS click here. Recruitment incentives may be authorized to eligible new hires. Shift work required (24-hour/7-day operations, rotating shifts from 9 to 13 hours). Day/Night determined after hiring. Weekend/Night/Holiday differentials authorized.
