SUPERVISORY IT CYBERSECURITY SPECIALIST (INFOSEC)

Summary

Click on "Learn more about this agency" button below for IMPORTANT additional information. The primary purpose of this position is to exercise second level supervisory and managerial authorities over the Directorate of Operations. Salary ranges include local market supplements.

Duties

Plans, organizes, and directs the activities of 33 CYOS Operations. Exercises supervisory personnel management responsibilities. Directs the execution of mission operations including the Detection, Prevention, and Response to malicious or suspicious events across over one-million computer workstations within the AFIN and at various networks with multiple classification levels. Exercises broad responsibility and authority for planning and managing the overall efficiency and effectiveness of assigned operations and communicating the cyber strategic plan, mission, vision, and values to employees within DO. Assists in planning, administering, and monitoring manpower resource requirements. Qualifications

This is a GG-14 position in the Defense Civilian Intelligence Personnel System (DCIPS). The GG-14 duties for the "Supervision/Management" work category are at the "Senior" work level and are equivalent to those at the GS-14 level. The selectee's salary will be set within the grade equivalent to a GS/GG grade based on the selectee's qualifications in relation to the job. In order to qualify, you must meet the specialized experience requirements described in the Office of Personnel Management (OPM) Qualification Standards for General Schedule Positions for the GS-2210, Information Technology (IT) Management Series (Alternative A). BASIC REQUIREMENT OR INDIVIDUAL OCCUPATIONAL REQUIREMENT: Experience: Experience must be IT related; the experience may be demonstrated by paid or unpaid experience and/or completion of specific, intensive training (for example, IT certification), as appropriate. For all positions individuals must have IT-related experience demonstrating each of the four competencies listed below. The employing agency is responsible for identifying the specific level of proficiency required for each competency at each grade level based on the requirements of the position being filled. 1. Attention to Detail - Is thorough when performing work and conscientious about attending to detail. 2. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services. 3. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. 4. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. In addition to meeting the basic requirement above, to qualify for this position you must also meet the qualification requirements listed below: EXPERIENCE REQUIRED: Your resume must reflect the quality level of experience which demonstrates the possession of the knowledge, skills, abilities, and competencies necessary for successful job performance required for this position. Examples of creditable experience include advanced knowledge and skill in application of concepts, and practices in two or more areas: cyberspace security, computer programming, computer operating systems (Windows, UNIX), malware forensics; threat analysis, artificial intelligence/machine learning; cyber incident handling/response, penetration testing, and software/malware reverse engineering. Advanced knowledge of the application of Information Assurance (IA), Mission Assurance (MA) and threat hunting technologies and techniques, analysis of computer systems, operating systems, network communication protocols, computer and network architectures and virtual machine (VM) technology; ability to analyze and correlate data in order to distinguish evidence of attacks or intrusions from normal activity. Extensive knowledge and skill in one or more of computer operating systems (Unix, Windows, etc.) enterprise services, file systems, security, configuration and analysis; network operations and security including net flows, protocols, PCAP, etc.; computer programming and scripting; and malware identification and analysis; and system forensics. KNOWLEDGE, SKILLS AND ABILITIES (KSAs): Your qualifications will be evaluated on the basis of your level of knowledge, skills, abilities and/or competencies in the following areas: 1. Advanced knowledge and skill in application of concepts, and practices in two or more areas: cyberspace security, computer programming, computer operating systems (Windows, UNIX), malware forensics; threat analysis, artificial intelligence/machine learning; cyber incident handling/response, penetration testing, and software/malware reverse engineering. 2. Advanced knowledge of the application of Information Assurance (IA), Mission Assurance (MA) and threat hunting technologies and techniques, analysis of computer systems, operating systems, network communication protocols, computer and network architectures and virtual machine (VM) technology; ability to analyze and correlate data in order to distinguish evidence of attacks or intrusions from normal activity. 3. Advanced knowledge of IA and MA technologies such as COMSEC, COMPUSEC, EMSEC, and OPSEC, computer systems, digital communications systems, network protocols, and computer architectures; and computer security penetration tools and techniques. Extensive knowledge and skill in one or more of computer operating systems (Unix, Windows, etc.) enterprise services, file systems, security, configuration and analysis; network operations and security including netflows, protocols, PCAP, etc.; computer programming and scripting; and malware identification and analysis; and system forensics. 4. Advanced knowledge and skill in identifying, analyzing, articulating and executing program goals and objectives, work processes, and administrative operations of the organization in support of major issues and operational challenges. Skill in developing new or modified work methods, processes, or information protection procedures; and ability to develop and articulate technical direction and approaches to formulating interoperability plans, implementation plans, and contingency plans involving communications and connectivity between major command and control systems; and proficiency in applying analytical and evaluative methods and techniques to issues or studies concerning the efficiency and effectiveness of program operations. 5. Ability to clearly and effectively discuss and present program objectives, managerial tasks, and technical information verbally and in writing to management and professional personnel at all levels within DoD and other government agencies; and ability to effectively perform in both leadership and fellowship roles as part of teams comprised of military, federal civilian, and contract employees from within and outside of the employee's work center and unit, to include effective interpersonal skills; the ability to plan, organize work, and consult effectively with co-workers, as well as the ability to recognize and assume informal leadership roles as appropriate to the team tasking and dynamics. 6. Ability to plan, organize, and direct the functions and mentor, motivate, and appraise the staff of an organization through subordinate supervisors; and ability to analyze, plan, and adjust work operations of one or more organizational segments to meet program requirements and objectives within available resources. PART-TIME OR UNPAID EXPERIENCE: Credit will be given for appropriate unpaid and or part-time work. You must clearly identify the duties and responsibilities in each position held and the total number of hours per week. VOLUNTEER WORK EXPERIENCE: Refers to paid and unpaid experience, including volunteer work done through National Service Programs (i.e., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community; student and social). Volunteer work helps build critical competencies, knowledge and skills that can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience.

Education

CONDITIONS OF EMPLOYMENT CONT'D POSITION DESIGNATION: Position is designated special-sensitive and requires eligibility for access to Sensitive Compartmented Information (SCI), other intelligence-related Special Sensitive information, or involvement in Top Secret Special Access Programs (SAP) to fully perform the duties and responsibilities of the position. A non-disclosure agreement must be signed. DRUG TESTING: This position has been designated by the Air Force as a Testing Designated Position (TDP) under the Air Force Civilian Drug Demand Reduction Program. Employee must pass initial and periodic short notice drug testing. Illegal drug use by employees in sensitive positions presents a clear threat to the mission of the Air Force, national security, and public safety. IA CERTIFICATION: Information Assurance Certification is a condition of employment. This position includes information assurance (IA) work as a paramount duty requirement. Per DoD 8570.01-M, the incumbent of this position must achieve the appropriate IA certification within six months of assignment of these duties. A waiver of this six-month requirement may be granted per DoD 8570.01-M, C3.2.4.2 or C3.2.4.3. Failure to receive the proper IA certification may result in removal from this position. TRAINING COMPLIANCE: Compliance with Air Force training specified in the Training and Readiness Manual; and applicable higher headquarters guidance memoranda for Cyber-Crew Training, Standardization and Evaluation, and Cyberspace Operations, is a condition of employment. The incumbent must achieve and maintain appropriate qualification requirements as specified and attain Mission Ready (MR) certification within 10 duty days after MQT. The Deputy Director may extend this period only in cases where the member is unable to achieve full Mission Readiness (MR) by the designated time through no fault of his/her own. Delays due to an individual's course/certification failures and an individual's failure to plan adequate time to meet all requirements cannot be waivered. Failure to achieve and maintain MR requirements may result in removal from this position. If an employee obtains MR but later loses his/her certification and is unable to regain certification, or the employee repeatedly regains and subsequently loses MR in less than three-years' time, the employee will be considered in violation of the MR condition of employment and will be removed from this position and/or processed for termination of employment. KEY DESIGNATION: The duty of this position meets all requirements as a category 4 designation and shall not be vacated during a national emergency or mobilization without seriously impairing the capability of the parent Federal Agency or office to function effectively. This position must be removed from the Ready Reserve and CAN NOT become a member of the Ready Reserve. (IAW: DoDD 1200.7, "Screening the Ready Reserve,") TRAINING DURATION: Training required/provided for this position may be 80 hours or longer in duration and may require that the employee sign Continuing Service Agreement to attend the course. For all IQT, MQT or training required for position-related certification/readiness or continuing education, the employee must accept the CSA as a condition of employment. CYBER SPECIFICATIONS: The incumbent requires strategic, operational and tactical expertise in cyberspace operations with hands-on experience in Defensive Cyberspace Operations, TTP development and execution, Threat Emulation, Hunt Methodology, Incident Response, Traffic Analysis, and Adversarial Tactics in order to fulfill a role as a senior DCO analyst/supervisor. CYBER CERTIFICATIONS: Cybersecurity Certification is a condition of employment. This position includes Cybersecurity work as a paramount duty requirement. Per DoD 8570.01-M, the incumbent of this position must achieve the appropriate IA certification within six months of assignment of these duties. A waiver of this six-month requirement may be granted per DoD 8570.01-M, C3.2.4.2 or C3.2.4.3. Failure to receive the proper IA certification may result inremoval from this position. ADDITIONAL INFORMATION: This position is a Defense Civilian Intelligence Personnel Systems (DCIPS) position implemented under Section 504, Title V of Public Law 99-569, Intelligence Authorization Act for Fiscal Year 1987, as codified in Sec 1601, Chap 83 of Title 10 United States Code which sets forth Air Force policies and procedures for DCIPS. This position is in the Excepted Service. DoD Components with DCIPS positions apply Veterans' Preference to preference eligible candidates as defined by Section 2108 of Title 5 USC, in accordance with the procedures provided in DoD Instruction 1400.25, Volume 2005, DCIPS Employment and Placement. If you are a veteran claiming veterans' preference, as defined by section 2108 of Title 5 U.S.C., you must submit documents verifying your eligibility with your application package. For additional information on DCIPS, click here How You Will Be Evaluated

Your application package (resume, supporting documents, and responses to the questionnaire) will be used to determine your eligibility, qualifications, and quality ranking for this position. Please follow all instructions carefully. Errors or omissions may affect your rating or consideration for employment. Best Qualified Group: Candidates in this category possess exceptional skills and experience to exceed well above the minimum requirements. Fully Qualified Group: Candidates in this category possess good skills and experience above the minimum requirements. Basically Qualified Group: Candidates in this category meet the minimum education and/or experience requirements. Your responses to the questionnaire may be compared to the documents you submit. The documents you submit must support your responses to the online questionnaire. If your application contradicts or does not support your questionnaire responses, you will receive a rating of "not qualified" or "insufficient information" and you will not receive further consideration for this job. Applicants who disqualify themselves will not be evaluated further. Other Information

Employed Annuitants (Reemployed Annuitants): Applicants in receipt of an annuity based on civilian employment in the Federal Service are subject to the DoD Policy on The Employment of Annuitants. Click here for more information. 120-Day Register: This announcement may result in a 120-day register that may be used to fill like vacancies for 120 days after the closing date. Applicants may be referred for consideration as vacancies occur. Direct Deposit: All federal employees are required to have direct deposit. Disabled veteran leave is available to a Federal employee hired on/after 5 Nov 2016, who is a veteran with a service-connected disability rating of 30% or more. For more information, click here. If you have questions regarding this announcement and have hearing or speech difficulties click here. Selectees who physically reside permanently in the U.S., the Commonwealth of Puerto Rico or Northern Mariana Islands, and the Possessions of the U.S., during the entire recruitment process (application, selection, and acceptance of a formal job offer) and selected for employment in the foreign area are eligible to receive certain foreign area benefits such as: Living Quarters Allowance (LQA) or government quarters, Post Allowance, Home Leave, etc. (subject to approval) Selectees who physically reside outside the U.S., the Commonwealth of Puerto Rico or Northern Mariana Islands, and the Possessions of the U.S., during any step of the recruitment process (application, selection, and acceptance of a formal job offer) will have foreign area benefits eligibility be determined on a case by case basis.