IT SPECIALIST (INFOSEC)

Summary You will serve as a GG-2210-13 IT Specialist (INFOSEC) at the HOPPER GLOBAL COMMUNICATIONS CENTER in Suitland, MD. As a Cyber Defense Analyst and specialist, you will perform a wide variety of operations including incident triage, incident ticketing, host and network intrusion monitoring, and malware detection. Learn more about this agency Duties You will serve as a Cyber Defense Analyst performing a wide variety of operations to include, but not limited to: triage, incident ticketing, host and network intrusion monitoring, and malware detection. You will monitors and report cybersecurity alerts, events and incidents as a result of findings through use of a variety of cybersecurity tools. You will collaborate with other technical and business leads internal and external to the organization in order to resolve and make conclusions on security incident management procedures and processes. You will ensure that web and email content filtering, data loss prevention, and block/unblock actions are carried out on items of interest. You will conduct host intrusion investigations, and identify anomalous activity indicative of threat actor compromise of the network ("hunt" activities). You will conduct the collection, production, distribution, and fusion and analysis of cybersecurity intelligence for the purposes of workforce education and signature/block development. You will identify, develop and train staff on computer security via both written advisories and/or in-person training. You will prepare and deliver written or verbal reports and summaries to brief higher level management. Requirements Conditions of employment Must be a US Citizen. Must be determined suitable for federal employment. Must participate in the direct deposit pay program. New employees to the Department of the Navy will be required to successfully pass the E-Verify employment verification check. To learn more about E-Verify, including your rights and responsibilities, visit e-verify.gov You must obtain and maintain a Top Secret security clearance and access to Sensitive Compartmented Information (SCI). Failure to do so may result in the withdrawal of an offer or removal. Indicate the level and date of your clearance in your resume. Successful completion of a pre-employment drug test (including marijuana) is required. A tentative offer of employment will be rescinded if you fail to report to the drug test appointment or pass the test. You will be subject to random testing. You must acknowledge in writing that you are accepting an appointment in the DCIPS (excepted service) which does not confer competitive status, prior to appointment. Within the Department of Defense (DoD), the appointment of retired military members within 180 days immediately following retirement date to a civilian position is subject to the provisions of 5 United States Code 3326. Males born after 12-31-59 must be registered for Selective Service. This position requires a periodic polygraph examination. This position may require a 2-year DCIPS trial period. This position is designated as a Cyber IT/Cybersecurity Workforce position. You must obtain and maintain the credentials as described in SECNAV M-5239.2 for specialty area 511 - Cyber Defense Analyst; see Additional Information section. Some travel may be required (CONUS/OCONUS). Qualifications This position requires one year of information technology related experience in the federal service or private or public sector demonstrating the following four competencies, as defined: 1. Attention to Detail - Is thorough when performing work and conscientious about attending to detail. 2. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services. 3. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. 4. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. In addition to experience demonstrating the four competencies above, your resume must demonstrate at least one year of specialized experience equivalent to the next lower grade level (GG/GS-12) or pay band in the federal service or equivalent experience in the private or public sector performing duties such as: 1. Perform Cybersecurity Incident Response Team (CSIRT) activities to include, but not limited to: triage, incident ticketing, host and network intrusion monitoring, and malware detection. Monitor, report, and investigate cybersecurity alerts, events and incidents as a result of findings through use of a variety of cybersecurity tools. 2. Conduct wireless vulnerability assessments and diagnose problematic activity; scan environment for unauthorized use of SCIF electromagnetic spectrum. 3. Splunk SIEM querying expertise to identify anomalous activity indicative of threat actor compromise of the network ("hunt" activities). 4. Cloud Security Monitoring (Microsoft Azure and AWS). Additional qualification information can be found from the following Office of Personnel Management website: https://www.opm.gov/policy-data-oversight/classification-qualifications/general-schedule-qualification-standards/#url=List-by-Occupational-Series https://www.opm.gov/policy-data-oversight/classification-qualifications/classifying-general-schedule-positions/standards/2200/gs2200a.pdf https://www.opm.gov/policy-data-oversight/classification-qualifications/general-schedule-qualification-standards/2200/information-technology-it-management-series-2210-alternative-a/ Additional qualification information can be found from the following DON DCIPS policy website: https://www.secnav.navy.mil/doni/Naval%20Intelligence%20Activity/Chapter%205%20-%20Employment%20and%20Placement.pdf Education N/A Additional information This position is covered by the Department of Defense Priority Placement Program. Additional vacancies may be filled by this announcement. A tentative offer of employment will be rescinded if the selectee fails to meet the pre-employment requirements, including failure to report to any of the scheduled appointments. Federal annuitant information: The selection of an annuitant is subject to the Department of Defense and Department of the Navy policy on the employment of annuitants. Policy information may be found at: http://www.secnav.navy.mil/donhr/Documents/CivilianJobs/FedCivAnnuitants.pdf During the application process you will have the ability to opt-in to make your resume available to hiring managers in the agency who have similar positions in the local commuting area. Depending on the hiring organization and the position being filled, job requirements (e.g., security clearance, travel, drug testing, financial disclosure filing, bargaining unit status, etc.) may vary. Other hiring managers filling similar positions may offer relocation expense reimbursement and/or may offer recruitment incentives for new employees, depending on funding availability and in accordance with policy. If you opt-in and are referred on a certificate, your resume will be available to other hiring managers for 180-days from the date the job announcement closes. Opting in does not impact your application for this announcement, nor does it guarantee further consideration for additional positions. ICTAP does not apply to Excepted Service positions. All Defense Intelligence positions under the Defense Civilian Intelligence Personnel System (DCIPS) are in the excepted service by specific statue, 10 U.S.C. 1601. This position is in the excepted service and does not confer competitive status. For more information on the DCIPS occupational structure click here. For more information about career advancement in DCIPS click here. PPP applicants will be placed at the FPL, if determined Well Qualified (WQ). To receive priority consideration, the FPL must be the same grade level or equivalent of the retained grade or the grade held immediately prior to separation. Recruitment incentives may be authorized to eligible new hires. Shift work may or may not be required (24-hour/7-day operations, rotating shifts from 9 to 13 hours). This position is designated as a Cyber Workforce position in the DoD Cyber Workforce Framework (DCWF) primary work role of (511) and, as a condition of employment, the incumbent of the position is required to maintain qualifications in accordance with DON Cyber Workforce Program requirements of SECNAV M-5239.2. This designation requires: - The incumbent participate in continuous learning (CL) program as described in SECNAVINST 5239.20A and SECNAV M-5239.2. An annual 20 hour minimum of Cyber Workforce related continuous learning must be documented in a current individual development plan signed by both the employee and supervisor. - The incumbent must obtain the required credentials within 12 months of appointment and maintain credentials as described in SECNAV M-5239.2 for DCWF role of (511) proficiency level (Advanced). For more information, review SECNAV M-5239.2 Chapter 3, paragraph b (1) (g) 1. *Failure to meet a condition of employment may result in disciplinary and/or adverse action up to removal from Federal service. Expand Hide  additional information Candidates should be committed to improving the efficiency of the Federal government, passionate about the ideals of our American republic, and committed to upholding the rule of law and the United States Constitution. Benefits A career with the U.S. government provides employees with a comprehensive benefits package. As a federal employee, you and your family will have access to a range of benefits that are designed to make your federal career very rewarding. Opens in a new windowLearn more about federal benefits. Review our benefits Eligibility for benefits depends on the type of position you hold and whether your position is full-time, part-time or intermittent. Contact the hiring agency for more information on the specific benefits offered.