Information Technology Specialist (Security)

Summary

This serves as public notice for the use of OPM's Direct Hire Authority. Applicants who meet the qualification requirements will be forwarded to the selecting official for consideration. We may select from this announcement or any other source to fill one or more vacancies. This position is located in the Bureau of Diplomatic Technology, Office of Cyber Security Testing, Monitoring & Response (DT/CTMR) & monitors & conducts incident response for the Agency's classified/unclassified IT systems

Duties

• Utilizes cyber defense tools to continuously monitor and analyze enterprise systems to detect malicious activity.
• Analyzes malicious activity to determine weaknesses, exploitation, and effects on systems and information.
• Documents and escalate incidents that can potentially cause ongoing and immediate impact to the environment.
• Adheres to incident response processes and recommends process and or policy improvements.
• Provides cybersecurity recommendations to Senior Leadership and advise on deficiencies and corrective actions.
• Produces contextual reports for senior leaders on network exploitation against agency-specific systems.

Qualifications

Applicants must meet all the qualification requirements described below by the closing date of this announcement. Applicants applying for the GS-13 grade level must meet the following requirements: Have IT-related experience demonstrating EACH of the four competencies AND specialized experience listed below: Attention to Detail - Monitors and analyzes network activity, documents and correlates incidents, and ensures controls and processes accurately address identified risks. Customer Service - Provides timely alerts, reports, and recommendations to Department leadership and other stakeholders, and follows up to ensure corrective actions are completed. Oral Communication - Delivers clear, authoritative briefings and incident updates to leadership and contractor teams, explaining threats, impacts, and recommended actions. Problem Solving - Manages the full incident lifecycle, evaluates and improves cybersecurity capabilities and processes, leads CIRT projects, and directs contractor efforts to resolve complex cyber threats. AND Have at least 1 full year of specialized experience equivalent to the GS-12 level in the Federal service which provided you with the particular knowledge, skills and abilities to perform the duties of the position. Qualifying specialized experience must demonstrate the following: Experience as a senior cyber incident responder managing cybersecurity events from detection and monitoring through analysis and mitigation of threats. Experience documenting and escalating cyber incidents, analyzing incident and trend data to assess attack effectiveness, and applying and improving incident response processes. Experience briefing senior leadership and contractor teams on cybersecurity risks and solutions through oral and written reports. NOTE: In order to qualify for this position, your experience MUST be IT related; the experience may be demonstrated by paid or unpaid experience and/or completion of specific, intensive training (for example, IT certification), as appropriate. There is no substitute of education for specialized experience for the GS-13 position.

Education

Education requirements do not apply to this vacancy announcement. How You Will Be Evaluated

A review of your two-page resume will be conducted and compared against your responses to the crediting plan (CP) to determine if you are qualified for this job. Applicants who meet the minimum qualification (MQ) requirements, as described in the “Qualifications” section of this announcement, will be assigned a score between 70 and 100. The evaluation process consists of an online assessment and a subject matter expert (SME) resume review of top qualified candidates based on the CP assessment. Resumes longer than two pages will be deemed ineligible and will not be considered further. Responses to questions that are not fully supported by your resume may result in a rating adjustment. All applications that meet the required qualifications and the cutoff score will be referred to the selecting official in the order in which the applications were received. Under the provisions of the Direct Hire Authority, veterans' preference and traditional rating and ranking of applications does not apply. The assessment is used to measure the degree in which your background matches the competencies (knowledge, skill, and abilities) required for this position. Your qualifications will be evaluated on the following competencies: Knowledge of information technology specialty areas. Knowledge of Cyber Affairs. Ability to conduct oversight of operational security personnel Ability to analyze technology hardware & software for solutions. Ability to clearly and accurately communicate technical information to all audiences. Ability to establish and maintain effective working relationships. In describing your experience, please be clear and specific. We do not make assumptions regarding your experience. Overstating your qualifications and/or experience in your application may result in your removal from consideration. Resume review: SMEs will review your resume to determine your qualifications for this position based on the required specialized experience. Your resume should demonstrate how you meet all aspects of the specialized experience statement. SMEs will not review additional information beyond your resume (e.g., links embedded in your resume will not be opened). If meeting basic qualifications through education only or a combination of education and experience, applicants will not be referred to the SMEs but will be reviewed by the HR Specialist for referral. Agency and Interagency Career Transition Assistance Program (CTAP and ICTAP) candidates must be well qualified for the position to receive consideration for selection priority. Candidates are considered well qualified if their knowledge, skills, and abilities (KSAs) exceed the minimum qualifications described in the announcement. You may preview questions for this vacancy. Other Information

To request a reasonable accommodation for additional time on the timed sections of the assessment, please submit your request using the “Request a Reasonable Accommodation” button within the Assessment Application. For all other reasonable accommodations at the U.S. Department of State, please contact the Office of Accessibility and Accommodations (OAA) at [email protected]. OAA is responsible for reviewing and adjudicating reasonable accommodation (RA) requests for the Assessment Battery being used for this announcement. The following applies to all RA requests: RA requests cover additional time on timed sections only. Applicants submitting a RA request MUST attach supporting medical documentation signed by a licensed, treating medical provider. The documentation should describe the nature, severity, and expected duration of the condition, identify the relevant medical condition or diagnosis, and explain the basis for the requested extension. RA requests that do not contain supporting medical documentation attachments at the time of initial request may be subject to further review. Note: the following documents do not, on their own, qualify for automatic approval of the RA request: Schedule A letters, VA benefits letters, or SSA letters. Applicants MUST submit their application before the vacancy closes, even if pending an accommodation decision. Applicants are encouraged to carefully follow instructions related to medical documentation provided in the vacancy announcement prior to beginning the RA process. Applicants will have 48 hours after their RA request is adjudicated to complete the assessment battery. Scores generated after the allotted timeframe will not be admissible and the applicant will not be considered further for the vacancy. If a different type of RA is needed, please contact OAA directly at [email protected]. If eligible, situational telework agreements may be permitted with supervisory approval. Multiple positions may be filled from this announcement. If eligible, applicants to this announcement may be referred to other similar positions in other Bureaus/Offices in the Department for up to 240 days. Telework eligibility and security clearance requirements may vary for such similar positions. Under the provisions of the Direct-Hire Authority, veterans' preference and traditional rating and ranking of applications does not apply. Agency & Interagency Career Transition Assistance Program (CTAP & ICTAP): View OPM's CTAP & ICTAP eligibility website for more information. You must be rated in the Well-Qualified category and submit supporting documents under the required documents section of this announcement to receive selection priority consideration. To be considered Well-Qualified applicants must: score an 85 or above, meet Minimum Qualifications, and demonstrate proficiency in some, but not all major aspects of the position.