IT CYBERSECURITY SPECIALIST (INFOSEC) (DIRECT HIRE)

Summary This position is being offered under OPM Direct Hire Authority. See more about Direct Hire under Conditions below. Serves as a subject matter expert with responsibility for analyzing data collected from a variety of cyber defense tools in order to investigate, respond to and mitigate threats and vulnerabilities to the Social Security Administration's information systems and reduce potential damage from such events. See QUALIFICATIONS for more information about this position. Responsibilities Analyzes log files, evidence and other information from a variety of sources (e.g., individual host logs, network traffic logs, firewall logs and intrusion detection system [IDS] logs). Identifies possible threats to network security and determine best methods for identifying the perpetrator(s) of a network intrusion. Validates intrusion detection system (IDS) alerts against network traffic using industry tools such as Wireshark, Splunk and Tanium. Oversees working groups, both internal and external to the agency, intended to further the collaboration and knowledge base of the Security Operations Center. Coordinate and publish division level after action reviews, lead efforts to revise processes and procedures as identified after action summary. Requirements Conditions of Employment Qualifications To meet Minimum Qualifications for this GS-13 Cybersecurity Specialist position you must demonstrate (1) Specialized Experience and (2) the IT Competencies for the federal 2210 series. (1) SPECIALIZED EXPERIENCE must have been gained in a federal position at or above GS-12 OR (if your position is on another federal pay scale OR outside of federal service) by performing duties at a level of responsibility and difficulty equivalent to GS-12 or above. SPECIALIZED EXPERIENCE is IT-related work that primarily consists of planning, developing, implementing and/or maintaining information security programs or policies. If you have this experience, your resume must describe, in your own words, the specific duties you perform that demonstrate it. Reviewers cannot assume you perform duties you don't describe. Your experience should include: -- creating and interpreting IT security policies and procedures, -- assessing risks and developing disaster recovery or contingency plans, -- working with other teams or agencies to develop and implement security solutions and -- explaining technical security information and recommendations to different audiences. (2) The following IT Competencies are applicable to this position. Attention to Detail: Is thorough when performing work and conscientious about attending to detail. Customer Service: Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services. Decision Making: Makes sound, well-informed, and objective decisions; perceives the impact and implications of decisions; commits to action, even in uncertain situations, to accomplish organizational goals; causes change. Information Management: Identifies a need for and knows where or how to gather information; organizes and maintains information or information management systems. Interpersonal Skills: Shows understanding, friendliness, courtesy, tact, empathy, concern, and politeness to others; develops and maintains effective relationships with others; may include effectively dealing with individuals who are difficult, hostile, or distressed; relates well to people from varied backgrounds and different situations Oral Communication: Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. Problem Solving: Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. Teamwork: Encourages and facilitates cooperation, pride, trust, and group identity; fosters commitment and team spirit; works with others to achieve goals. Technical Competence: Uses knowledge that is acquired through formal training or on-the-job experience to perform one's job; works with, understands, and evaluates technical information related to the job; advises others on technical issues. MINIMUM QUALIFICATIONS (Specialized Experience and IT Competencies) must be met by the closing date of this announcement. Selectees must have (or be able to obtain) and maintain a Top Secret Security Clearance (TS-SCI). Information on this job series can be found at https://www.opm.gov/policy-data-oversight/classification-qualifications/competency-based-policy/general-schedule/2200/2210-competency-based-policy/competency-based-qualification-standard/ Education This position does not have an educational requirement. Additional Information IT Cybersecurity Specialist position(s) are being filled through the Office of Personnel Management's delegated Direct Hire Authority and are open to all U.S. citizens. Selections made under this Direct Hire Authority will be processed as new appointments to the civil service. Current federal employees will be given a new appointment to the civil service, if selected. Under the provisions of the Direct Hire Authority, Veterans Preference and the "Rule of Many" do not apply. Additional selections may be made for this vacancy six months from the closing date of this announcement. If you are a male born after December 31, 1959, you must certify that you have registered with the Selective Service System or are exempt under the Selective Service Law. See www.sss.gov . If you are a federal contractor, do not identify yourself as a federal employee. See QUALIFICATIONS for information on qualifying for position. See REQUIRED DOCUMENTS and HOW YOU WILL BE EVALUATED for information on applying for this position. This is a non-bargaining unit position. This position is not authorized to be filled virtually or through outstationing. One or more vacancies may be filled at either of the listed Official Duty Stations (ODS). This position is on a full-time, flex-time schedule; Alternate Work Schedules (AWS) may be authorized. Telework may be approved after all conditions for telework have been met. To participate in telework, when authorized, you must reside within a 2-hour commute to the assigned ODS by the time of your appointment. Relocation expenses will not be paid; salary will be set in accordance with locality pay provisions. Successful performance of work in this position and adherence to conditions of this position will be assessed during the 1-year probationary period that may be served by new appointees (e.g., new to SSA and/or new to this series). You must have (or be able to obtain) and maintain a Top Secret Security Clearance (TS-SCI). This is a critical sensitive position. You may be required to complete Standard Form 86, Questionnaire for Sensitive Positions, to have the appropriate investigation conducted. Location of position: Chief of Security and Resiliency (SR) Cybersecurity